-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 André,
On 6/7/2009 3:41 AM, André Warnier wrote: > Jason Joseph wrote: > ... > >> Yes all static files are being served by Apache. No they aren't being >> loaded from the document root they are actually being loaded from >> within our application war. > > That I do not understand. It seems contradictory. > Or, to put it another way, how do you manage that ? He probably means that httpd is serving static files from the /deployment directory/, not the WAR file itself. Some folks on this list hotly debate the wisdom of allowing a web server to serve content from your webapp deployment directory. I find the practice acceptable, as long as proper security precautions are taken to avoid info leakage (like reading your db username/password from META-INF/context.xml oops!). - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEUEARECAAYFAkotNrsACgkQ9CaO5/Lv0PAvmwCfQL2hK0UTcw2EMWdHOIwqMdsP +qEAl10TaagsP/B4LIHhPNBw72bc9SE= =SOQ3 -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
