tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christopher Schultz <ch...@christopherschultz.net>
Subject Re: stopping scanning of TLDs
Date Wed, 08 Nov 2017 20:27:09 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Ray,

On 11/8/17 11:24 AM, Ray Holme wrote:
> In a prior post, I asked if there was a way to see if a jar uses  a
> tag library. Chris responded - look for ".tld" in the files.

To clarify, I was responding to a question as to whether a JAR file
*contained* a tag library, not that it used one. Big difference.

> So I looked (turns out ecj.. has no ".tld": $ grep "tld"
> *.jarBinary file catalina-storeconfig.jar matches Binary file
> ecj-4.6.1.jar matches Binary file tomcat-util-scan.jar matches

I agree with Chris Cheshire: check the ZIP contents list and not a
binary check. Though the ZIP filenames are stored (mostly) in the
clear, it's possible that you might get unlucky. Also make sure you
use a case-insensitive check.

> I am just trying to find a reliable way to see if there is TAG
> library.

Searching for .tld files ought to do it.

Have you found a case where this *didn't* work?

- -chris
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=kaCd
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message