DO NOT REPLY [Bug 5724] - Error page not displaying

2002-01-24 Thread bugzilla

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=5724.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=5724

Error page not displaying

[EMAIL PROTECTED] changed:

   What|Removed |Added

 Status|RESOLVED|REOPENED
 Resolution|LATER   |



--- Additional Comments From [EMAIL PROTECTED]  2002-01-24 20:40 ---
Reopen.

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




DO NOT REPLY [Bug 5724] - Error page not displaying

2002-01-24 Thread bugzilla

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=5724.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=5724

Error page not displaying

[EMAIL PROTECTED] changed:

   What|Removed |Added

 Status|REOPENED|RESOLVED
 Resolution||FIXED



--- Additional Comments From [EMAIL PROTECTED]  2002-01-24 20:41 ---
I don't think the fix will not be ported to the 4.0.x, due to possible security
problems, but the bug has been fixed in the HEAD branch.

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




DO NOT REPLY [Bug 5724] - Error page not displaying

2002-01-08 Thread bugzilla

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=5724.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=5724

Error page not displaying





--- Additional Comments From [EMAIL PROTECTED]  2002-01-08 04:16 ---
The HEAD branch now allows you to do this. The nightly for 1/9 will have the
fix. However, the patch won't be immediately ported to the 4.0 branch, because
of the possible security issues.

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: DO NOT REPLY [Bug 5724] - Error page not displaying

2002-01-08 Thread Larry Isaacs

I wouldn't mind seeing the check in StaticInterceptor being
a configurable option.  That way it could be turned back
on should the need arise.

Cheers,
Larry

 -Original Message-
 From: Bill Barker [mailto:[EMAIL PROTECTED]]
 Sent: Monday, January 07, 2002 5:35 PM
 To: Tomcat Developers List
 Subject: Re: DO NOT REPLY [Bug 5724] - Error page not displaying
 
 
 Tomcat 3.3 looks like it has the same problem, only worse 
 (since it will
 fail a static jsp:include that lives in WEB-INF).  However, 
 the check isn't
 really needed in 3.3, since if the request came from the user
 AccessInterceptor would have already failed it.  If nobody 
 objects, I'll
 remove the check from StaticInterceptor later in the week.
 - Original Message -
 From: [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Monday, January 07, 2002 1:49 PM
 Subject: DO NOT REPLY [Bug 5724] - Error page not displaying
 
 
  DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG
  RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
  http://nagoya.apache.org/bugzilla/show_bug.cgi?id=5724.
  ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND
  INSERTED IN THE BUG DATABASE.
 
  http://nagoya.apache.org/bugzilla/show_bug.cgi?id=5724
 
  Error page not displaying
 
  [EMAIL PROTECTED] changed:
 
 What|Removed |Added
  
 --
 
 --
   Status|RESOLVED|REOPENED
   Resolution|INVALID |
 
 
 
  --- Additional Comments From [EMAIL PROTECTED]  
 2002-01-07 13:49 ---
  I can't find it either, so it looks like it would be 
 allowed. The error is
  thrown by the DefaultServlet, which will refuse to return 
 any page from
  /WEB-INF. Removing the check is very risky for obvious 
 reasons, so I think
 we'll
  delay a fix.
 
  --
  To unsubscribe, e-mail:
 mailto:[EMAIL PROTECTED]
  For additional commands, e-mail:
 mailto:[EMAIL PROTECTED]
 
 
 
 --
 To unsubscribe, e-mail:   
 mailto:[EMAIL PROTECTED]
 For additional commands, e-mail: 
 mailto:[EMAIL PROTECTED]
 

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




DO NOT REPLY [Bug 5724] - Error page not displaying

2002-01-07 Thread bugzilla

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=5724.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=5724

Error page not displaying





--- Additional Comments From [EMAIL PROTECTED]  2002-01-07 12:22 ---
I've re-read the servlet spec , especially sec9.9 and the comment on the 
location tag in the DTD and it doesn't say a word about not being able to set 
the error page under WEB-INF. 
While it's true you can't redirect I think you can access resource under WEB-
INF (via a req dispatcher for example).

I seems to me that an error page has nothing to do under the root of the app 
context and is far better placed under WEB-INF.

Comments ?

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




DO NOT REPLY [Bug 5724] - Error page not displaying

2002-01-07 Thread bugzilla

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=5724.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=5724

Error page not displaying

[EMAIL PROTECTED] changed:

   What|Removed |Added

 Status|RESOLVED|REOPENED
 Resolution|INVALID |



--- Additional Comments From [EMAIL PROTECTED]  2002-01-07 13:49 ---
I can't find it either, so it looks like it would be allowed. The error is
thrown by the DefaultServlet, which will refuse to return any page from
/WEB-INF. Removing the check is very risky for obvious reasons, so I think we'll
delay a fix.

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




DO NOT REPLY [Bug 5724] - Error page not displaying

2002-01-07 Thread bugzilla

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=5724.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=5724

Error page not displaying

[EMAIL PROTECTED] changed:

   What|Removed |Added

 Status|REOPENED|RESOLVED
 OS/Version|Other   |All
   Priority|Other   |Low
   Platform|Other   |All
 Resolution||LATER

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Re: DO NOT REPLY [Bug 5724] - Error page not displaying

2002-01-07 Thread Bill Barker

Tomcat 3.3 looks like it has the same problem, only worse (since it will
fail a static jsp:include that lives in WEB-INF).  However, the check isn't
really needed in 3.3, since if the request came from the user
AccessInterceptor would have already failed it.  If nobody objects, I'll
remove the check from StaticInterceptor later in the week.
- Original Message -
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, January 07, 2002 1:49 PM
Subject: DO NOT REPLY [Bug 5724] - Error page not displaying


 DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG
 RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
 http://nagoya.apache.org/bugzilla/show_bug.cgi?id=5724.
 ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND
 INSERTED IN THE BUG DATABASE.

 http://nagoya.apache.org/bugzilla/show_bug.cgi?id=5724

 Error page not displaying

 [EMAIL PROTECTED] changed:

What|Removed |Added
 --
--
  Status|RESOLVED|REOPENED
  Resolution|INVALID |



 --- Additional Comments From [EMAIL PROTECTED]  2002-01-07 13:49 ---
 I can't find it either, so it looks like it would be allowed. The error is
 thrown by the DefaultServlet, which will refuse to return any page from
 /WEB-INF. Removing the check is very risky for obvious reasons, so I think
we'll
 delay a fix.

 --
 To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
 For additional commands, e-mail:
mailto:[EMAIL PROTECTED]



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]