tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Gregor Schneider" <rc4...@googlemail.com>
Subject Re: disable war deployment
Date Wed, 03 Jan 2007 12:58:17 GMT
Hi Stephan,

well, that's awkward.

Even if you are able to disable automatic deployment, anybody knowing
his ways around Tomcat will be able to change the settings again thus
make Tomcat load the other apps :(

my idea would be to write a valve checking which apps are installed:
If any other then your delivered apps are installed, Tomcat is
forwarding the request to a customized error-page.

however, even this solution will not prevent anybody from tampering.

HTH

Greg
-- 
what's puzzlin' you, is the nature of my game
gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2
gpgp-key available @ http://pgpkeys.pca.dfn.de:11371

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message