Re: mod_jk multiple slashes reveals jsp code

2003-06-26 Thread Henri Gomez
Palle Girgensohn wrote: --On onsdag, juni 25, 2003 11.16.02 +0200 Henri Gomez [EMAIL PROTECTED] wrote: Palle Girgensohn wrote: Hi, When using mod_jk and apache13: JkMount /app/*jsp ajp13 will redirect requests like http://server/app/foobar.jsp to tomcat, just fine. But,

Re: mod_jk multiple slashes reveals jsp code

2003-06-26 Thread Marc Slemko
On Thu, 26 Jun 2003, Henri Gomez wrote: Could we stop useless critics and flams and be more positives. I'm sorry that you think it is useless to point out the specific areas where mod_jk and mod_jk2 are doing things wrong. It's open source, and if you have objections, you're welcome to

Re: mod_jk multiple slashes reveals jsp code

2003-06-26 Thread Henri Gomez
Marc Slemko wrote: On Thu, 26 Jun 2003, Henri Gomez wrote: Could we stop useless critics and flams and be more positives. I'm sorry that you think it is useless to point out the specific areas where mod_jk and mod_jk2 are doing things wrong. If jk's does some things wrong, we're open to make

Re: mod_jk multiple slashes reveals jsp code

2003-06-26 Thread Remy Maucherat
Marc Slemko wrote: On Thu, 26 Jun 2003, Henri Gomez wrote: By describing the problems, I'm hoping that someone who does have the time right now can actually make one of the multitude of Apache -- tomcat connectors into something production quality without gaping security, performance, and

Re: Re: mod_jk multiple slashes reveals jsp code

2003-06-26 Thread Earthlink Abuse Department
Hello, You are receiving this message in follow-up to a report received by the EarthLink Abuse Department. You may have submitted this report to a number of addresses including but not limited to [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], or [EMAIL PROTECTED]

Re: mod_jk multiple slashes reveals jsp code

2003-06-25 Thread Henri Gomez
Palle Girgensohn wrote: Hi, When using mod_jk and apache13: JkMount /app/*jsp ajp13 will redirect requests like http://server/app/foobar.jsp to tomcat, just fine. But, http://server//app/foobar.jsp will not be catched by JkMount, and apache will send the jsp source code to the browser. Of

Re: mod_jk multiple slashes reveals jsp code

2003-06-25 Thread Palle Girgensohn
setup: FreeBSD 4.8-RELEASE, apache 1.3.27 w/ mod-ssl 2.8.14, mod_jk 1.2.3 and 1.2.4. Tomcat version is irrelevant since the request never leaves apache, but anyway, it is tomcat 3.3.1a. JkMount /pp/system/*jsp [Wed Jun 25 01:32:48 2003] [jk_uri_worker_map.c (460)]: Into

Re: mod_jk multiple slashes reveals jsp code

2003-06-25 Thread Henri Gomez
Palle Girgensohn wrote: setup: FreeBSD 4.8-RELEASE, apache 1.3.27 w/ mod-ssl 2.8.14, mod_jk 1.2.3 and 1.2.4. Tomcat version is irrelevant since the request never leaves apache, but anyway, it is tomcat 3.3.1a. JkMount /pp/system/*jsp Shouldn't it be : JkMount /pp/system/*.jsp

Re: mod_jk multiple slashes reveals jsp code

2003-06-25 Thread Palle Girgensohn
--On onsdag, juni 25, 2003 11.41.29 +0200 Henri Gomez [EMAIL PROTECTED] wrote: Palle Girgensohn wrote: setup: FreeBSD 4.8-RELEASE, apache 1.3.27 w/ mod-ssl 2.8.14, mod_jk 1.2.3 and 1.2.4. Tomcat version is irrelevant since the request never leaves apache, but anyway, it is tomcat 3.3.1a.

Re: mod_jk multiple slashes reveals jsp code

2003-06-25 Thread Henri Gomez
Palle Girgensohn wrote: --On onsdag, juni 25, 2003 11.41.29 +0200 Henri Gomez [EMAIL PROTECTED] wrote: Palle Girgensohn wrote: setup: FreeBSD 4.8-RELEASE, apache 1.3.27 w/ mod-ssl 2.8.14, mod_jk 1.2.3 and 1.2.4. Tomcat version is irrelevant since the request never leaves apache, but anyway,

Re: mod_jk multiple slashes reveals jsp code

2003-06-25 Thread Marc Slemko
On Wed, 25 Jun 2003, Palle Girgensohn wrote: setup: FreeBSD 4.8-RELEASE, apache 1.3.27 w/ mod-ssl 2.8.14, mod_jk 1.2.3 and 1.2.4. Tomcat version is irrelevant since the request never leaves apache, but anyway, it is tomcat 3.3.1a. JkMount /pp/system/*jsp [Wed Jun 25 01:32:48 2003]

Re: mod_jk multiple slashes reveals jsp code

2003-06-25 Thread Palle Girgensohn
--On onsdag, juni 25, 2003 11.16.02 +0200 Henri Gomez [EMAIL PROTECTED] wrote: Palle Girgensohn wrote: Hi, When using mod_jk and apache13: JkMount /app/*jsp ajp13 will redirect requests like http://server/app/foobar.jsp to tomcat, just fine. But, http://server//app/foobar.jsp will not be

mod_jk multiple slashes reveals jsp code

2003-06-23 Thread Palle Girgensohn
Hi, When using mod_jk and apache13: JkMount /app/*jsp ajp13 will redirect requests like http://server/app/foobar.jsp to tomcat, just fine. But, http://server//app/foobar.jsp will not be catched by JkMount, and apache will send the jsp source code to the browser. Of course, a rewrite can