[EMAIL PROTECTED] wrote:
> > 6.8 Container Managed Security Constraints
> > Due to the way that Tomcat 3.2 is implemented, container managed security
> > constraints are imposed both on the original request URI *and* on subrequests
> > initiated to handle RequestDispatcher.forward() or Re
Hans Bergsten wrote:
>
> [EMAIL PROTECTED] wrote:
> > [...]
> > > 6.8 Container Managed Security Constraints
> > > Due to the way that Tomcat 3.2 is implemented, container managed security
> > > constraints are imposed both on the original request URI *and* on subrequests
> > > initiated
> > The reason - it's a huge security hole to not check them ( IMHO ) - a site
> > running multiple webapps ( with different security constraints ) may be
> > compromised if the constraints of the original requests are propagated on
> > forward. ( you can get a request dispatcher for a different w
[EMAIL PROTECTED] wrote:
>
> > 6.8 Container Managed Security Constraints
> > Due to the way that Tomcat 3.2 is implemented, container managed security
> > constraints are imposed both on the original request URI *and* on subrequests
> > initiated to handle RequestDispatcher.forward() or
> 6.8 Container Managed Security Constraints
> Due to the way that Tomcat 3.2 is implemented, container managed security
> constraints are imposed both on the original request URI *and* on subrequests
> initiated to handle RequestDispatcher.forward() or RequestDispatcher.include()
> cal
RPM for TC 3.2b7 are available at :
http://rpmized.free.fr/
Compiled under Redhat 6.1 + updates with SSL support.
size
2106243 tomcat-3.2-beta7.1.src.rpm
1567141 tomcat-3.2-beta7.1.noarch.rpm
257654 tomcat-manual-3.2-beta7.1.noarch.rpm
1093345 tomcat-mod-3.2-beta7.1.src.rpm
84332
"Craig R. McClanahan" wrote:
>
> Hear ye! Hear ye! At long last, an updated "beta 7" release of Tomcat
> 3.2 is available for download, at:
>
> http://jakarta.apache.org/builds/tomcat/release/v3.2-beta-7
> [...]
Thanks a bunch Craig, and everyone else who helped out getting all the
remai
Hear ye! Hear ye! At long last, an updated "beta 7" release of Tomcat
3.2 is available for download, at:
http://jakarta.apache.org/builds/tomcat/release/v3.2-beta-7
Relative to "beta 6", a very large number of bug fixes have been applied
-- thanks to all who have been reporting them via Bu
