RE: Protect JSP from Direct Access in Tomcat 7.0.xx

2012-06-19 Thread Sharon Prober (sprober)
You could always position your jsp's inside the WEB-INF dir This will enable you to access them only through server redirects rather than absolute url's Sharon -Original Message- From: Kiran Badi [mailto:ki...@poonam.org] Sent: Tuesday, June 19, 2012 3:10 AM To: Tomcat Users

RE: Session time out never takes place with ajax

2011-11-15 Thread Sharon Prober (sprober)
takes place with ajax -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sharon, On 11/10/11 3:11 AM, Sharon Prober (sprober) wrote: > I understand it is invoked before the filters, but after > completion it would arrive to the filter/servlet container anyway. > So what your saying is that if

RE: Session time out never takes place with ajax

2011-11-10 Thread Sharon Prober (sprober)
--Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Thursday, November 10, 2011 8:04 AM To: Tomcat Users List Subject: Re: Session time out never takes place with ajax -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sharon, On 11/9/11 12:56 AM, Sha

RE: WAR unzipping not catched

2011-11-09 Thread Sharon Prober (sprober)
Perhaps consider using the tomcat event listeners that trigger when a context is up Sharon -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Wednesday, November 09, 2011 3:01 PM To: Tomcat Users List Subject: Re: WAR unzipping not catched Stefan Siegel wrote

Session time out never takes place with ajax

2011-11-09 Thread Sharon Prober (sprober)
Hi, This is my first post here so wish me luck J My question is as follow: I have a web based application running on tomcat 6.0.29 On my main page there is a polling ajax call every 5 seconds. Clearly this revalidates the session and by that renders the session timeout feature unusable