tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christopher Schultz <ch...@christopherschultz.net>
Subject Re: Philamasophical question META-INF
Date Fri, 26 Oct 2007 14:18:49 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Johnny,

Johnny Kewl wrote:
> Got a little sensitive info that I would like to package with an application.
> I noticed that even if the user has say left listing on.. that stuff in 
> META-INF is not listed. TC seems to actively block it or ignore it.
> 
> What do you think... if I stay away from names like
> context.xml
> and 
> MANIFEST.MF
> 
> do you think its an OK to store in META-INF or am I breaking some rule that I should
know about?

Storing stuff in WEB-INF should be just fine -- I would stick to WEB-INF
instead of META-INF. I'd bet that Tomcat protects WEB-INF the same way.

I have seen lots of projects where all the JSPs go into WEB-INF so they
aren't accidentally accessed directly from a browser, or aren't
accidentally served as source code if the JSP compiler/runner isn't enabled.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHIfdJ9CaO5/Lv0PARAvepAJsFrSwv4lDXEkThWVC2CbUysron1QCgqsc/
Pisks5HYiUk04E26tr++3mo=
=wtPU
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message