Alla Winter wrote:
> BY default it is possible to retrieve files located under the 'WEB-INF'
> directory. 

No, it's not -- that's mandated in the servlet spec (SRV 9.5).

For example: www.someserver.com/WEB-INF./web.xml or
> www.someserver.com/WEB-INF./classes/MySer
> <http://www.someserver.com/WEB-INF./classes/MySer%20vlet.class>  vlet.class

Uh, what's with the '.' following the 'WEB-INF'? If that's literal,
that's your problem; 'WEB-INF./' is not the same as 'WEB-INF/' :-)

-- 
Hassan Schroeder ----------------------------- [EMAIL PROTECTED]
Webtuitive Design ===  (+1) 408-938-0567   === http://webtuitive.com

                          dream.  code.



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to