Re: stopping scanning of TLDs

Thanks for your help Chris. Here is my final script to do this right. -/local/bin/tld_scan:#!/bin/bash - #    find tldS -    Ray Holme 2017 #      embedded spaces in filenames wreak havoc if [ $# -eq 0 ]; then   echo " usage $0 list-of-jar-files"   exit 1 fi VERBOSE=0 LIST= WORK=/tmp/$$.wrk

Re: stopping scanning of TLDs

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ray, On 11/8/17 3:51 PM, Ray Holme wrote: > this makes it easy in linux or mac land for i in *.jar; do echo > scanning $i; jar tf $i | grep "\.tld"; sleep 1; done I'd change that to: $ for i in *.jar; do echo scanning $i; unzip -l "$i" | grep -i

Re: stopping scanning of TLDs

this makes it easy in linux or mac land for i in *.jar; do echo scanning $i; jar tf $i | grep "\.tld"; sleep 1; done On Wednesday, November 8, 2017 3:27 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ray, On 11/8/17 11:24

Re: stopping scanning of TLDs

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ray, On 11/8/17 11:24 AM, Ray Holme wrote: > In a prior post, I asked if there was a way to see if a jar uses a > tag library. Chris responded - look for ".tld" in the files. To clarify, I was responding to a question as to whether a JAR file

Re: stopping scanning of TLDs

On Wed, Nov 8, 2017 at 11:24 AM, Ray Holme wrote: > In a prior post, I asked if there was a way to see if a jar uses a tag > library. > Chris responded - look for ".tld" in the files. > So I looked (turns out ecj.. has no ".tld": > $ grep "tld" *.jarBinary file

Re: stopping scanning of TLDs

In a prior post, I asked if there was a way to see if a jar uses  a tag library.   Chris responded - look for ".tld" in the files. So I looked (turns out ecj.. has no ".tld": $ grep "tld" *.jarBinary file catalina-storeconfig.jar matches Binary file ecj-4.6.1.jar matches Binary file

Re: stopping scanning of TLDs

On 08/11/2017 12:59, Ray Holme wrote: > The following three are interesting as they are in the tomcat distributed > list of NOT-TO_SCAN and have .tlds: catalina-storeconfig.jar; ecj-4.6.1.jar; > tomcat-util-scan.jar No, they don't. What led you to conclude that they did? Mark

stopping scanning of TLDs

Using Chris's algorithm, I searched for ".tld" in all jars used by both tomcat and my application extending it. The following two were in my .../WEB-INF/lib directory and needed to NOT be in the list of NOT-TO_SCAN   i.e. ...  they need to be scanned:  jasperreports-5.1.0.jar matches;