Re: Tomcat 3.2.1 JSP Source Disclosure

[Kazuhiro Kazama]

Robert

This bug is already reported as BugRat Report #513 by Mr. Karezaki, too.

From: Robert Ellis <[EMAIL PROTECTED]>
Subject: Tomcat 3.2.1 JSP Source Disclosure
Date: Tue, 19 Dec 2000 13:15:18 +0100
Message-ID: <[EMAIL PROTECTED]>
> This only seems to happen if you leave out the http version number in
> the request.

That's right. A good workaround may be using mod_jk.

Kazuhiro Kazama ([EMAIL PROTECTED])             NTT Network Innovation Laboratories