tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Dionisio Ruiz de Zarate" <dioni...@tinieblas.com>
Subject running tomcat + apache and the system shows me the xml file. bur or bad configuration?
Date Sat, 01 Feb 2003 16:32:10 GMT
I have one application running in tomcat 4.1.18 and apache.
if i have writte in the browser (explorer):
http://www.domain.com/WEB-INF/web.xml
the system shows me the file.
This is one great security problem.
How can i deny this?
i the appache conf file i have:
<Directory "WEB-INF">
Options -Indexes
AllowOverride None
Order deny,allow
Deny from all
</Directory>

Please help me


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


Mime
View raw message