On 03/06/2015 20:48, Christopher Schultz wrote:

<snip/>

> I don't
> understand the underlying reasons why Tomcat treats symlinks
> specially...

<snip/>

It is to do with case sensitivity on non case sensitive file systems.
The check we have to add on Windows to stop things like JSP source
disclosure by requesting /index.Jsp also blocks symlinks.

Removing that check (and hence enabling symlinks) is safe on a case
sensitive file system and unsafe on a non-case sensitive file system.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to