tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Stephen Souness <sou...@hotmail.com>
Subject Re: Shared Javascript, CSS, and Image Files
Date Thu, 15 May 2008 21:44:11 GMT
Christopher Schultz wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Stephen,
> 
> Stephen Souness wrote:
> | The symbolic link solution should be fine as long as you configure
> | Tomcat to follow symbolic links (see Steve O's response in this thread).
> |
> | Having a "shared webapp" as suggested by Johnny could lead to problems
> | with cross site scripting restrictions for the Javascript code if any
> | cookies were involved.
> 
> Not really. This would be "cross-context scripting", and as long as you
> set your cookies' path to be "/", you should be okay.
> 
> - -chris
> 

True, provided that the webapps are under the same domain name :)

If the shared webapp has it's own domain name (e.g. 
http://images.myapp.com/ ) then the cross-site scripting restrictions 
that I mentioned could arise.

The original post didn't mention whether the webapps were on separate 
domain names, so I assumed...


Regards,

Stephen


> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iEYEARECAAYFAkgsV4AACgkQ9CaO5/Lv0PCjeQCfSviPc79JAZCXibQnSEp6pUen
> 1AEAnRPhgDAXl7uEByr42pwxZFiWjnpa
> =2Nl/
> -----END PGP SIGNATURE-----
> 
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
> 
> 


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message