On 11/02/2016 22:56, Dougherty, Gregory T., M.S. wrote: > I would like to have a jar file in tomcat/lib that can be called from any of > the running web apps. I need for the code in the jar to behave differently > depending on which web app called it. It is not in this case possible for > the code to “trust” the caller to tell it the URL of the caller. > > Is it possible for that code to independently determine the URL of the caller?
If you can't trust the caller to tell you the URL, you can't trust that the caller isn't going to tinker with whatever mechanism you do use to determine the URL. You'd have a better chance of doing this if you ran under a SecurityManager but unless you write an application from the start with the intention of running it under a SecurityManager it is usually a lot of additional effort to update the app so it runs correctly. Mark --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
