Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (nike.apache.org: domain of lists@nabble.com designates
 216.139.236.158 as permitted sender)
Message-ID: <24338874.post@talk.nabble.com>
Date: Sat, 4 Jul 2009 16:17:20 -0700 (PDT)
From: Keith67 <keithmatthewwatson@gmail.com>
To: users@tomcat.apache.org
Subject: Tomcat for serving only static files - how to prevent the likes of
 JSP execution
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit


This might seem like a strange request, but I would like to use Tomcat to
only serve static files, from a certain context anyway.

I have an application I would like to allow users to upload files through,
and then I want to be able to link to them and serve them from the server.

If I do this, I run the risk of them uploading executable content (e.g. a
JSP file) and then having it executed on the server, so I would like to stop
this happening.

Does anyone know how I could prevent any dynamic processing of files in a
given Tomcat context.

I appreciate I could just install Apache and do it that way but I'd rather
just keep it simple with Tomcat.

Thanks.
-- 
View this message in context: http://www.nabble.com/Tomcat-for-serving-only-static-files---how-to-prevent-the-likes-of-JSP-execution-tp24338874p24338874.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org