On Fri, Aug 20, 2010 at 12:18 PM, Sameera Jayasoma <[email protected]> wrote:

> Hi,
>
> Carbon webapp is deployed in root web context in all the Carbon based
> products. During the Carbon initialization, we register servlets under this
> root context using OSGi Http Service with paths such as carbon, services.
> Users can access these servlets in the following manner.
>
> 1) https://localhost:9443/carbon
> 2) https://localhost:9443/services
> 3) https://localhost:9443/fileupload
> 4) https://localhost:9443/filedownload
> and many more..
>

+ https://localhost:9443/registry

>
> (1) is used to access the management console and (2) is used to serve we
> service requests.
>
> Now with the webapp deployment support, users can deploy webapps with any
> web contexts.  Say a user deploy a webapp with
> the "carbon" web context, and that will crash the management console.
> Because requests are now delegated to the deployed webapp. Please try
> deploying the attached webapp to a latest WSAS distribution from trunk and
> observe the behaviour.
>
> Likewise there can be many web contexts, we need to restrict.
>
> The issues here is, any bundle in Carbon can register a servlet using an
> arbitary path(say foo). Now if there is a webapp with the web context "foo",
> request will not be delegated to the servlet.
>
> I don't think restricting certain web contexts is not a good solution,
> becuase in future people can introduce more servlets to Carbon. And then we
> have to restrict more web contexts.
>
> One solution would be to deploy Carbon webapp with a web context other that
> the root.
>
> Thanks
> Sameera
>
>
> --
> Sameera Jayasoma
> Technical Lead
> WSO2, Inc. (http://wso2.com)
> email: [email protected]
> blog: http://tech.jayasoma.org
>
> Lean . Enterprise . Middleware
>
> _______________________________________________
> Carbon-dev mailing list
> [email protected]
> https://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev
>
>
_______________________________________________
Carbon-dev mailing list
[email protected]
https://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev

Reply via email to