RE: Disable a library in Tomcat configuration

[jonmcalexander]

Thanks Mark­


Thanks,


Sent with BlackBerry Work (www.blackberry.com)

From: Mark Thomas 
Sent: Dec 11, 2021 2:23 AM
To: users@tomcat.apache.org
Subject: Re: Disable a library in Tomcat configuration

On 11/12/2021 02:02, jonmcalexan...@wellsfargo.com.INVALID wrote:
> Is there a way to forcibly prevent a library from loading in Tomcat during 
> startup that will also prevent an app from loading the library?
>
> Trying to find­ a way to block vulnerabilities.

Dependencies are rarely optional. Blocking a library from loading is
likely to break the application.

Tomcat does not provide such a feature.

You could probably do it with a custom web resources implementation but
that would be non-trivial and, as I said above, likely to break apps.

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Disable a library in Tomcat configuration

[Mark Thomas]

On 11/12/2021 02:02, jonmcalexan...@wellsfargo.com.INVALID wrote:

Is there a way to forcibly prevent a library from loading in Tomcat during 
startup that will also prevent an app from loading the library?

Trying to find­ a way to block vulnerabilities.


Dependencies are rarely optional. Blocking a library from loading is 
likely to break the application.


Tomcat does not provide such a feature.

You could probably do it with a custom web resources implementation but 
that would be non-trivial and, as I said above, likely to break apps.


Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Disable a library in Tomcat configuration

[jonmcalexander]

Is there a way to forcibly prevent a library from loading in Tomcat during 
startup that will also prevent an app from loading the library?

Trying to find­ a way to block vulnerabilities.


Thanks,


Sent with BlackBerry Work (www.blackberry.com)