/admin/users/ is open for source browsing

2004-06-21 Thread Ushakov, Sergey N
Hi, I have occasionally discovered that the 'admin' app reveals its jsp folders' contents without any password. And allows reading jspf sources afterwards... Is it intended? ;) And maybe a more general question - is it sound to have the default servlet 'listings' defaulting to 'true'? Perhaps

TC5.0.25 ignores my META-INF/context.xml

2004-06-20 Thread Ushakov, Sergey N
Hi, I've just upgraded from TC4.1.12 to TC5.0.25. Everything is OK, but TC evidently ignores my context configuration file unless I place it directly into 'conf\Catalina\localhost\'. It is ignored both if placed as 'webapps\my-app\META-INF\context.xml' and as 'webapps\my-app.xml'. What is

Re: Problem with passing japanese values to a servlet

2002-06-12 Thread Ushakov, Sergey N
Internationalization was common issue with Tomcat 3 (or rather with servlet spec 2.2). If you can forget about Tomcat 3 - do not hesitate. If you can't - try "com.oreilly.servlet" package available at http://www.servlets.com. It worked for me perfectly in the past (not with Japanese locale but

HttpSessionContext deprecation reasons

2002-06-11 Thread Ushakov, Sergey N
Hi, we know HttpSessionContext is deprecated now as claimed to be unsecure. Meanwhile it is very useful for some tasks. It is also not a big deal to implement it in a propriatary web app. But does anyone know of the reasons for deprecation? I could find any trace of them... Are the security

Re: Listener Objects

2002-06-11 Thread Ushakov, Sergey N
I have just recently merged in the issue... My results (not necessarily perfect :) are: - all listener objects are to be declared in web.xml; - it seems they are instantiated automatically along with the web app; - it may be a good idea to implement a listener as a special class, independent of

file upload using POST

2002-06-06 Thread Ushakov, Sergey N
Sorry, I'm sure my question is a FAQ, but I still can't find an answer. Does Jakarta/Tomcat have a standard facility for file upload processing using POST? I have searched the Tomcat 4 docs, but did not find any trace. JGuru mentions the org.apache.tomcat.request.ParseMime class, but it seems

Re: tomact not staring

2002-06-06 Thread Ushakov, Sergey N
bad command suggests that most likely something is wrong with JAVA_HOME... But to make sure I can suggest the following: 1) modify catalina.bat so that the first line becomes echo on instead of @echo off 2) start Tomcat again and watch the batch file output 3) have a good look at the lines

Re: Classpaths

2002-06-06 Thread Ushakov, Sergey N
I understand this is not the answer you expect, and I would like to know the right answer to your question also, but still... If moving the classes is too crude, can you afford making a copy of your .jar(s) or class tree(s) ? :))) I have been doing it this way till now... Regards, Sergey

RE: Classpaths

2002-06-06 Thread Ushakov, Sergey N
To Andrés Muñoz: I believe this is the right answer for your question. It is for Tomcat 4, but perhaps if you examine in you 3.x how tomcat.bat calls cpappend.bat you'll find your way... Regards, Sergey - Original Message - From: Tia Haenni [EMAIL PROTECTED] To: Tomcat Users List