Re: How to Set Content Security Policy headers in Tomcat 8.5.x

Hi, On Wed, Sep 9, 2020 at 8:54 PM Nitin Kadam wrote: > Hi All, > > Need to set the *Content security policy* header for Tomcat Web server > (8.5..x) which hosted on Windows server 2012, As per the internal security > team same is not a complaint > can you please help me setti

How to Set Content Security Policy headers in Tomcat 8.5.x

Hi All, Need to set the *Content security policy* header for Tomcat Web server (8.5..x) which hosted on Windows server 2012, As per the internal security team same is not a complaint can you please help me setting CSP filters for my Tomcat application hosted on windows server. below the

Re: Content Security policy for Tomcat 8.5

AM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Nitin, > > On 10/3/19 09:54, Nitin Kadam wrote: > > Hell All, > > > > Internal security team recommended to set *Content security policy* >

Re: Content Security policy for Tomcat 8.5

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Nitin, On 10/3/19 09:54, Nitin Kadam wrote: > Hell All, > > Internal security team recommended to set *Content security policy* > header for Web server as same is not complaint with security > standard. can you please help me sett

Content Security policy for Tomcat 8.5

Hell All, Internal security team recommended to set *Content security policy* header for Web server as same is not complaint with security standard. can you please help me setting CSP filters for my Tomcat application hosted on windows server. -- Regards Nitin Kadam

Re: Issue in configuring JAVA Security policy

On 26/06/2019 04:59, Mohan T wrote: > Dear All, > > We have the following environment set at our premises. > > Apache tomcat server:apache-tomcat-8.5.35 > Red Hat Enterprise Linux Server release 7.4 > jdk1.8.0_162 > > When we enable JAVA security policy the componen

Issue in configuring JAVA Security policy

Dear All, We have the following environment set at our premises. Apache tomcat server:apache-tomcat-8.5.35 Red Hat Enterprise Linux Server release 7.4 jdk1.8.0_162 When we enable JAVA security policy the components are getting deployed. It throws the following error. Anyone has encountered

Re: Security Policy

On 31/01/2017 05:27, George S. wrote: > I have a question about security policies. > > I have a jar file that I'm putting in my WEB-INF/lib directory. The jar > is signed with a certificate. I've inspected the jar file using > jarsigner and it is signed. There is a policy entry that basically says

Security Policy

I have a question about security policies. I have a jar file that I'm putting in my WEB-INF/lib directory. The jar is signed with a certificate. I've inspected the jar file using jarsigner and it is signed. There is a policy entry that basically says if a jar is signed with that key, grant all

Grails under Tomcat with security policy

I've asked this on the grails mailing list with no luck. Can someone tell me the minimum permissions I need to give a grails application to run under Tomcat? I don't want to disable all access checks when using reflection, and that seems to be what is recommended most of the time. Any assista

[CVE-2007-5342] Apache Tomcat's default security policy is too open

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 CVE-2007-5342: Tomcat's default security policy is too open Severity: Low Vendor: The Apache Software Foundation Versions Affected: Tomcat 5.5.9 to 5.5.25 Tomcat 6.0.0 to 6.0.15 Description: The JULI logging component allows web applicatio

codeBase changes if antiResourceLocking is active - Security policy fails

Hello, I'm using Tomcat 6.0 with the "security" option in order to assign different permissions to several webapps running within the Tomcat security sandbox. However, I've encountered the following effect when I activate the antiJARLocking and antiResourceLocking flags in the context.xml file

How to specify security policy file for a web application

Hi, I need to specify java policy file for a web application. I am looking for a way so that each web application will have its own policy file. It will be nice if policy file can be put in the web application directory itself. Regards, Anto Paul

How to get security policy grants to work with principals

Hi, I'm trying to implement a security policy on Tomcat 5.0.25. It works fine with grants of the form grant codeBase "file:" { permission .. }; However when I try a grant of the form grant codeBase "file:", principal "username&quo