13.07.2001 09:39:46, "Remy Maucherat" <[EMAIL PROTECTED]> wrote:
>> hi again,
>>
>> this patch allows the user to disable the generation of html
directory
>> listings for requests on collection resources (as init-parameter).
>>
>> in addition I've moved the html-generating code for directory
listing
>> into a (new) subclass of GetMethod, with the (somewhat lengthy)
name
>> DirectoryBrowsingGetMethod. this class will do the directory
display
>> job for any collection resource request, but delegate to the
GetMethod
>> for 'normal' resources. the GetMethod class will return a 403
status
>> for requests on collections.
>>
>> the rationale behind this is to separate the html-generating code
from
>> the normal GET handling, as
>> (a) I think "real" sites won't use the default directory browsing
>> anyway
>
>I'm neutral on the subject, because :
>- PROPFIND will return even richer information that the dir browse
page
>- I wouldn't see the Slide WebDAV servlet being accessible on a
public
>website in the forseeable future, mainly because it's extremely
feature rich
>(therefore, more vulnerable to exploits than a servlet which would
only
>serve GET requests)
>
>I'll apply the patch, since it may be a functionality other people
would
>want.
[snip]
umm, has there been a problem with that change (as it's not in cvs
yet) ?
should I make a simpler patch that let's you disable directory
browsing but doesn't move the directory browsing functionality in a
new class ? I'd really like to see this functionality in the basic
slide servlet (i.e. without having to create my own WebdavServlet and
GetMethod subclasses).
-chris
________________________________________________________________
[EMAIL PROTECTED]
