Pier Fumagalli wrote:
On 9/12/02 17:14 "Jeanfrancois Arcand" <[EMAIL PROTECTED]> wrote:


Youy don't need to learn JSP/Admin Tool if you don't use it. The actual
Tomcat installation doesn't require you to learn the Admin Tool or JSP....

As I said 6 or so months ago... That "thing" is a security hole as big as
the Empire State Building... As most of the stuff that make up "tomcat"...
We have some bugs in JSR-154, few in Jasper, few in JSSI, few in CGI... All
together it makes a ****load of em...
I didn't understand the problem with the admin/manager tools, since
they aren't mandatory and very easy to desactivate.

If someone can come up with a Servlet-only distribution, at least I won't
get holes from all the other (totally useless) components...
JSP ?

    Pier (a _user_ now)
And that's sad.



--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to