tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 39614] New: - IIS ISAPI plugin blocks acces to all "WEB-INF" folders
Date Fri, 19 May 2006 10:19:08 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=39614>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=39614

           Summary: IIS ISAPI plugin blocks acces to all "WEB-INF" folders
           Product: Tomcat 5
           Version: 5.5.17
          Platform: PC
        OS/Version: Windows Server 2003
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Connector:HTTP
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: d.goraczkowski@4system.com


I am using Tomcat with ISAPI redirector under IIS 6.0 and Win2k3 Server. It 
works fine, but on the same server, there's another, third-party application, 
which needs http requests with "WEB-INF" strings in it. Now, that's the problem. 
Redirector plugin blocks all requests with this string and displays: "Access 
forbidden! You don't have permission to access the requested object.It is either 
read-protected or not readable by the server." message instead.
Isn't there any way to disable this feature in the plugin? I know, that it can 
be useful for security reasons but here it's a nuisance.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Mime
View raw message