On Thu, Mar 3, 2022 at 1:10 PM Berneburg, Cris J. - US <cberneb...@caci.com.invalid> wrote:
> > Running Tomcat in a container via Docker Desktop on a Windows host > > with the web application served from a location on the host mounted > > /bound to the container is insecure. > > So the app resides on the "host" OS file system and is mounted into the > Docker "guest" container, rather than residing on a Docker volume or in the > guest container's file system? > Correct (as far as my experience was concerned). The problem only occured for us when we had the Tomcat webapps folder "bound" (or mounted) to a folder on the host file system. If the webapps folder was just on a volume in the Docker container, it worked without issue. Technically I haven't tried it in the container's file system, only a volume attached to the container, but I expect that would also be without issue.
