tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Alexander Leyke <>
Subject JSP @include directive
Date Tue, 18 Feb 2003 20:14:02 GMT

I need to use include directive in JSP that points to file physically 
located outside directory tree for Web application context. I tested two 
forms of include directive: <%@include file="/../inc/" %> and 
<%@include file="/symlink/" %>.

As far as I can tell from Tomcat 4.1.18 sources the former is forbidden, 
i.e., cannot specify path that goes beyond application context. The 
latter is OK, as long as 
org.apache.naming.resources.FileDirContext.setAllowLinking() has been 
called with true argument. Symlinks are disallowed by default and I 
don't see any place in the code where setAllowLinking method gets 
called. Sounds like a problem to me.

Please tell me if above behavior is erroneous, and how can I cope with 
this situation.
Thank you,

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message