https://bz.apache.org/bugzilla/show_bug.cgi?id=52489
Mark Thomas <ma...@apache.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution|--- |FIXED
--- Comment #3 from Mark Thomas <ma...@apache.org> ---
After some further testing, I can confirm that this is already implemented in
8.0.x onwards. I am therefore resolving this as fixed.
Note that it will only work if the web application is run from an unpacked WAR.
Signing a WAR file raises all sorts of questions I haven't been able to find
answers to. This might be something to raise with the Servlet EG if someone
wishes to do so. Those questions include:
- How to handle a class, packages in an unsigned JAR, packaged in a signed WAR?
- Under what circumstances, if any, should resources outside of WEB-INF/classes
be validated and what validation should occur?
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
