Starting with Tomcat 4.1.12 the old style servlet URL's "app/servlet/class-path" are no longer available in the default web.xml configuration.
This can be a problem for "legacy" servlet applications, for instance web pages with hyperlinks that use the old style URL would suddenly stop working with 4.1.12 Tomcat. You can turn old-style servlet URL's back on (see Tomcat release notes) but then your servlet container is vulnerable to a documented security hole (which is why it is off by default now). One "workaround" we found for clients of the JOT Servlets framework (http://www.jotobjects.com) is to re-map the deployment descriptor to support old-syle servlet URL's for specific servlets. Here is an example: <servlet> <servlet-name>HelloJot</servlet-name> <servlet-class>com.jotobjects.demo.servlet.HelloJot</servlet-class> </servlet> <servlet-mapping> <servlet-name>HelloJot</servlet-name> <url-pattern>/servlet/com.jotobjects.demo.servlet.HelloJot</url-pattern> </servlet-mapping> This enables URL's like this - http://[host]/[app]/servlet/com.jotobjects.demo.servlet.HelloJot -- Paul Copeland, JOT Object Technologies - http://www.jotobjects.com ___________________________________________________________________________ To unsubscribe, send email to [EMAIL PROTECTED] and include in the body of the message "signoff SERVLET-INTEREST". Archives: http://archives.java.sun.com/archives/servlet-interest.html Resources: http://java.sun.com/products/servlet/external-resources.html LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
