>> *Whether someone can get access to any file/directory outside the tomcat >> webapps folder using "Style 1 (using ..\ equivalent in the URL itself) >> Directory traversal attack (scoped to Tomcat) on Windows".*
Have you tried this? How does Tomcat respond? I tried to access some files outside the webapps folder but got 404 error. Thanks & Regards, Aditi