tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Mark Thomas <>
Subject Re: Default servlet
Date Tue, 09 May 2006 02:13:35 GMT
Tim Lucia wrote:
> Look in conf/web.xml -- it is commented out by default. 
Not it isn't. The default servlet is enabled by default.

> It is widely
> considered evil to use the default servlet.  At a minimum, it poses security
> risks.
Again, no. The default servlet is not considered evil. You are thinking
of the invoker servlet.


To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message