On 29.12.2009 07:40, Igor Drobiazko wrote: > Hello folks, > I would like to invite you all to vote for/against the upcoming release. In > this release we fixed the two most popular Tapestry issues and I wonder > about few votes. Maybe Christmas time is not the best time for a release. > However, there is a discussion in the dev list about the fix of TAP5-815 and > blocking of static resources inside the classpath. Please participate. > https://issues.apache.org/jira/browse/TAP5-815 > From the perspective of this list, an additional short guide on how to check whether your Tapestry application is secured OK, is most welcome. Meaning: - WEB-INF is not accessible, - META-INF is not accessible, - .class .tml .properties are not accessible etc. This way any user could try and see if the solution works, and rest assured.
Maybe these checks should be automatically tested when starting the app in the container and have some warnings in the Log if not.
smime.p7s
Description: S/MIME Cryptographic Signature
