Re: security-constraint url-pattern question

2023-12-15 Thread Mark Thomas
On 14/12/2023 17:28, ResSoft wrote: Chris, I figured out how to make this work. It works in my dev dox but not in my prod box. Both have the same version of tomcat. Here is the web.xml entry. I any ideas would be great. Those constraints look correct to me and a quick test using

Re: security-constraint url-pattern question

2023-12-14 Thread ResSoft
Chris, I figured out how to make this work. It works in my dev dox but not in my prod box. Both have the same version of tomcat. Here is the web.xml entry. I any ideas would be great. securedapp /* CONFIDENTIAL

Re: security-constraint url-pattern question

2023-12-14 Thread ResSoft
Chris, Thanks for the response, but I think I explained myself wrong. The http redirect to https works when I use just this entry in my web.xml securedapp /* CONFIDENTIAL But if I want to force http to https and lock the second url pattern

Re: security-constraint url-pattern question

2023-12-14 Thread Christopher Schultz
Kent, On 12/14/23 09:13, ResSoft wrote: I am currently forcing my app to use https. Here is what I have in my app web.xml file and it works as intended securedapp /* CONFIDENTIAL I also now want to restrict the browser from pulling up files in

security-constraint url-pattern question

2023-12-14 Thread ResSoft
I am currently forcing my app to use https. Here is what I have in my = app web.xml file and it works as intended securedapp /* CONFIDENTIAL I also now want to restrict the browser from pulling up files in certain = directories. Search the web I see to use