tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Craig R. McClanahan" <>
Subject Re: WEB-INF is readable ??
Date Tue, 22 Aug 2000 00:23:23 GMT
Paul Libbrecht wrote:

> Hi all,
> I seem to be able to read WEB-INF/web.xml from an http request ???
> isn't that something completely anti servlet 2.2 ??

If your client can do a request like this:


and get output instead of an error message, that is against the spec and
is a bug.  However, nothing stops your application's servlets from using
getResource() or file I/O to read the contents of files under WEB-INF.
How are you trying to access it?

> Paul

Craig McClanahan

View raw message