Mark is right (of course)... my bad.

-----Original Message-----
From: Mark Thomas [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 08, 2006 10:14 PM
To: Tomcat Users List
Subject: Re: Default servlet

Tim Lucia wrote:
> Look in conf/web.xml -- it is commented out by default. 
Not it isn't. The default servlet is enabled by default.

> It is widely
> considered evil to use the default servlet.  At a minimum, it poses
security
> risks.
Again, no. The default servlet is not considered evil. You are thinking
of the invoker servlet.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to