Return-Path: 
 <users-return-195026-apmail-tomcat-users-archive=tomcat.apache.org@tomcat.apache.org>
Delivered-To: apmail-tomcat-users-archive@www.apache.org
Received: (qmail 35074 invoked from network); 22 Apr 2009 14:54:18 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3)
  by minotaur.apache.org with SMTP; 22 Apr 2009 14:54:18 -0000
Received: (qmail 79442 invoked by uid 500); 22 Apr 2009 14:54:14 -0000
Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org
Received: (qmail 79383 invoked by uid 500); 22 Apr 2009 14:54:14 -0000
Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@tomcat.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@tomcat.apache.org>
List-Post: <mailto:users@tomcat.apache.org>
List-Id: <users.tomcat.apache.org>
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Delivered-To: mailing list users@tomcat.apache.org
Received: (qmail 79372 invoked by uid 99); 22 Apr 2009 14:54:14 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 22 Apr 2009 14:54:14 +0000
X-ASF-Spam-Status: No, hits=-0.0 required=10.0
	tests=SPF_HELO_PASS,SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (athena.apache.org: domain of miki@ceti.pl designates
 62.121.128.10 as permitted sender)
Received: from [62.121.128.10] (HELO relay.ceti.pl) (62.121.128.10)
    by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 22 Apr 2009 14:54:05 +0000
Received: from tau.ceti.pl (tau.ceti.pl [62.121.128.11])
	by relay.ceti.pl (Postfix) with ESMTP id 251F9D527A
	for <users@tomcat.apache.org>; Wed, 22 Apr 2009 16:53:43 +0200 (CEST)
Received: from [10.20.64.84] (unknown [89.174.237.33])
	by tau.ceti.pl (Postfix) with ESMTP id CA98D202FE8
	for <users@tomcat.apache.org>; Wed, 22 Apr 2009 16:53:42 +0200 (CEST)
Message-ID: <49EF2F76.7050603@ceti.pl>
Date: Wed, 22 Apr 2009 16:53:42 +0200
From: Mikolaj Rydzewski <miki@ceti.pl>
User-Agent: Thunderbird 2.0.0.21 (X11/20090318)
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: Tomcat Security and Struts
References: <8bab7ada0904220642k7340d6ccvafb49aa8ecc0ce8d@mail.gmail.com>
 <49EF235E.20403@apache.org>
In-Reply-To: <49EF235E.20403@apache.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Virus-Checked: Checked by ClamAV on apache.org

Mark Thomas wrote:
> <url-pattern>/*</url-pattern> will protect everything.
>   
If  your login page uses any external assets (images, stylesheets, etc), 
it will become corrupted (assets won't load).

-- 
Mikolaj Rydzewski <miki@ceti.pl>


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org