logo       

RE: Resin 3.0.6 - directory traversable on Unix: msg#00009

text.xml.resin.user

Subject: RE: Resin 3.0.6 - directory traversable on Unix

Joseph - thank you so much for the info. But in Resin 3.0.6, the

<web-app><directory-serlvet></web-app> no longer exists, it uses

<web-app-default><servlet servlet-name="directory"
servlet-class="com.caucho.servlets.DirectoryServlet"/></web-app-default>

instead. By commenting out the <!-- server servlet-name="directory" ....
-->, the directory listing will be disabled.

- Vince

-----Original Message-----
From: Joseph Dane [mailto:jdane@xxxxxxxxxx]
Sent: Monday, March 01, 2004 11:14 AM
To: resin-interest@xxxxxxxxxx
Subject: Re: Resin 3.0.6 - directory traversable on Unix


Vince Law <vlaw@xxxxxxx> writes:

> I have used the same configuration for both Window and Unix to run
> Resin 3.0.6, but on Unix the directory is traversable (meaning it lets
> the user to list all the files in a directory), whereas on Window it
> isn't. I wonder if there is a way that I can make the Unix to
> disallow directory traversing.

I think this:

<web-app id='/foo' ...>
...
<directory-servlet>none</directory-servlet>
...
</web-app>

will work.

--

joe



<Prev in Thread] Current Thread [Next in Thread>
Google Custom Search

News | FAQ | advertise