-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Rob,
On 8/8/14, 7:50 PM, Rob Silver wrote: > Is it true that by default on a Apache Tomcat 7.025 server RESTFUL > verbs are enabled as part of the HTTP protocol Tomcat uses? Tomcat does not filter HTTP verbs other than TRACE out of the box. If you implement HttpServlet.service() then you can accept any verb you want. > Anotherwards if I hade a restful web application - perhaps a spring > mvc one would it work out of the box as far as security constraints > go? Security constraints and HTTP verbs are not really related. > I have not yet seen any way to control a Tomcat server not to > accept DELETE, PUT etc.. in addition to standard GET / POST http > verbs. What have you tried? - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJT5hSMAAoJEBzwKT+lPKRYcUUP/iARKwpe3bxsQtYGCk/McFLx Tklcnz54d1yUFEg6GjsJbVoyX2Z+6cqahZaM8KvFPu1egX8oXB7263Xk5DRAyYvQ KXLAYzlfM2D9uDrNxPYy1evle4325YwoNreZyChjLTpL2qk8fdyzczoujsKNVHfL KR2kvwF68rew/C5qrx16XUq5waZGhZixP0IAA9pEGn2eHxGxN5dp6i97Hid7DTiX jTDdv7eFetOxIqBYEMLMCVvcrAqcgPsjrUX+he7QLwGqr8NpOMGb4zNC1QvGXlsz GwOdpLkTgymbdrQpXVxsH8TscoeBba9otqX76PcnbJFIrGMnonpIvPStkOvXDEL5 RCcS91PDFdWpkRURt/raSx5n5+SMkP8l8PW5VPHliJ+FLkmdCZpkv1dSSyCiXluC v2uoh18HTHWu7oqcHFHivnDWMjV+XhYsl8yW7fy9n4WKxKy94GMoGwP3LAW4UquB DaowRsGf5OYJcVI1XSvWL3aeo8l0MF91kXzh/e9GKznSHRGMubv+LEYYzSrl8bej 1HUyIJIBIu1BpK/JA0r1movLcvrnqklEaygzOZ6dJM4+gsvzg0adWe7tZFcdMfUx f4bdGnWYU+URAprfprK0PVZu1csk9XiRZkD4MuhSUEBCRicIPzGJ50r9AAV11RUG SE7xll5x3oHj4PzFbG1e =fOsB -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
