tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Caldarale, Charles R" <Chuck.Caldar...@unisys.com>
Subject RE: [OT] servlet use. TC6, FC10
Date Thu, 05 Feb 2009 15:30:10 GMT
> From: André Warnier [mailto:aw@ice-sa.com]
> Subject: Re: [OT] servlet use. TC6, FC10
>
> I was just checking that page indicated above, and happened
> to read the "caseSensitive" attribute definition.
> Doesn't that explanation strike anyone as weird ?

Only if you're not aware that both Java and URLs are case-sensitive.

> Or am I just not getting the double negatives somewhere ?

Nope, you're not :-)

> I would expect a "caseSensitive" attribute to have a default value
> "false" under Windows for example.

Because the Windows file system is not case sensitive, it would be easy to accidentally expose
mandated hidden resources via such URLs as:
    http://host/myApp/wEb-Inf/dont-look-here.jsp
if case sensitivity were disabled in Tomcat.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus
for use only by the intended recipient. If you received this in error, please contact the
sender and delete the e-mail and its attachments from all computers.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message