tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Mark Thomas <ma...@apache.org>
Subject Re: tomcat and apache document root
Date Wed, 29 Jul 2009 11:25:55 GMT
Nikolay Diulgerov wrote:
> hello there,
> I just wonder if there is an option to configure apache to serve as
> document root /tomcat/webapps/myapp

Unless you are very careful (and you haven't been - /WEB-INF/ &
/META-INF/ are wide open), that is a really bad idea from a security
point of view. It is much better to keep Tomcat and httpd separate.


> JkMount /*.jsp ajp13
> JkMount /*.jspa ajp13
> JkMount /* ajp13

Use
JkMount /myapp/*.jsp ajp13

etc to map a single context.

Mark




---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message