Re: SECURITY BUG: No place to disable HTTP TRACE vulnerability

[Remy Maucherat]

Bill Barker wrote:
Ok, this isn't right.  Tomcat defaults to NonLoginAuthenticator if there is
no login-config.  This one just approves everybody for everything.
Ok. This isn't absolutely critical, but needs to be fixed.

Rémy

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]