tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Craig R. McClanahan" <Craig.McClana...@eng.sun.com>
Subject Re: WEB-INF is readable ??
Date Tue, 22 Aug 2000 00:23:23 GMT
Paul Libbrecht wrote:

> Hi all,
>
> I seem to be able to read WEB-INF/web.xml from an http request ???
>
> isn't that something completely anti servlet 2.2 ??
>

If your client can do a request like this:

    http://localhost:8080/WEB-INF/web.xml

and get output instead of an error message, that is against the spec and
is a bug.  However, nothing stops your application's servlets from using
getResource() or file I/O to read the contents of files under WEB-INF.
How are you trying to access it?

>
> Paul
>

Craig McClanahan



Mime
View raw message