Can you arrange your file layout in a way, that the jsp's aren't under the document root for apache ? (I guess they are, otherwise apache couldn't show them)
> -----Original Message----- > From: Angus Mezick [mailto:[EMAIL PROTECTED] > Sent: Wednesday, August 13, 2003 5:34 PM > To: Tomcat Users List > Subject: RE: security hole on windows Apache -> Tomcat? > > > I ONLY see the problem in apache. So I think it is a config problem. > Will the jk2 URI : > [uri:www.SITENAME.org/*.jsp] catch www.SITENAME.org/index.jsp%20 ? > When I turn on the accessvalve tomcat doesn't see this request. > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
