method to protect webapps from users

hi guys, I'm new to this list, but a long time user of Tomcat. For a long time now I've had a problem which I'm sure most of you are familiar with ; users. As always happens with any app in development the final tidy up stuff gets left too late and some stuff gets missed out. The bit in this ca

Re: method to protect webapps from users

Hi David, The method is quite simple, the filter notices requests on the way in, and ties up sessions to currently running requests/URL's. The response/request are wrapped to allow caching of the response(no data is sent to the user until the request finishes processing, this can be changed but I

Re: method to protect webapps from users

Thanks for the guidance Rémy, this is why I'm posting to this list, I just want something in the base build that includes this functionality, so whatever it takes is fine by me :D Pete > [EMAIL PROTECTED] wrote: > >>hi guys, >> >>I'm new to this list, but a long time user of Tomcat. For a long t

Re: method to protect webapps from users

Hi Tim, Currently it is only using servlet spec stuff, but this imposes a few limitations and some extra resource usage, if it became a valve in tomcat it could remove these limitations and extra resource burdens. For this reason I was seeking approval from those involved with the tomcat dev work