Paul Gonin wrote:
Hi,
I have a JSP that uses a bean. It uses the following directory structure :
webapps/myapply/myapply.jsp
webapps/myapply/web-inf/classes/mybean.class
It works fine but I am annoyed that people can download the bean directly
and "access" its content because it
nal Message-
From: [EMAIL PROTECTED] [SMTP:[EMAIL PROTECTED]]
Sent: Wednesday, December 20, 2000 12:58 AM
To: [EMAIL PROTECTED]
Subject: RE: Deny web-inf access (security problem)
Set up a directory outside your tomcat directory to contain java class
files, and include that directory in yo
esday, December 20, 2000 12:58 AM
To: [EMAIL PROTECTED]
Subject: RE: Deny web-inf access (security problem)
Set up a directory outside your tomcat directory to contain java class
files, and include that directory in your classpath. Keep it outside of
your Apache directory as
Paul Gonin wrote:
Hi,
I have a JSP that uses a bean. It uses the following directory structure :
webapps/myapply/myapply.jsp
webapps/myapply/web-inf/classes/mybean.class
It works fine but I am annoyed that people can download the bean directly
and "access" its content
I am surprised this could happen, you must use a customized configuration file.
Usually, the default conf file generated by tomcat contains at least something
like this for your web-inf folder. You may want to add this to your conf file
or web configurations somewhere. (depending on the server
Set up a directory outside your tomcat directory to contain java class
files, and include that directory in your classpath. Keep it outside of
your Apache directory as well.
-Original Message-
From: Paul Gonin [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 19, 2000 2:02 PM
To:
