Re: SSI Security Hack

2002-11-27 Thread Pier Fumagalli
On 25/11/02 20:01 "Dan Sandberg" <[EMAIL PROTECTED]> wrote: > What's the story with the servlets-ssi.renametojar hack? > > Are the classloader issues that necessitated this going to be fixed in > Tomcat 5? Will they be backported to Tomcat 4? > > If this won't be fixed in Tomcat 5, than we can

SSI Security Hack

2002-11-25 Thread Dan Sandberg
What's the story with the servlets-ssi.renametojar hack? Are the classloader issues that necessitated this going to be fixed in Tomcat 5? Will they be backported to Tomcat 4? If this won't be fixed in Tomcat 5, than we can split servlets-ssi into the insecure part ( which can run exec ) and th