Yes, o'course in production. In my mind - there is no place for this
method in HttpServlet - it should throw the Exception. OK for
GenericServlet, but this is Javasoft problem.
R
----- Original Message -----
From: "David Wall" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, June 13, 2001 6:58 PM
Subject: Re: Tomcat as Service Crashing.
> > Yap! As sad as it is - I could crash THE JVM started by Tomcat
> > by merely putting System.exit(-9) in my servlet.
> > How can webmasters protect themselves from such code?
>
> You should run with a security manager installed and don't allow
System.exit
> in the tomcat.policy file.
>
> David
>
