Thank Chuck, for your answer,
but in in FAQ Windows http://tomcat.apache.org/faq/windows.html
there is this paragraph
"Can I turn off case sensitivity?"
Yes
with the link "Yes" to "the Resources Component", but i don't know how work
with this component !
Can you help me in this context?
Again thanks
From: "Caldarale, Charles R" <[EMAIL PROTECTED]>
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
To: "Tomcat Users List" <users@tomcat.apache.org>
Subject: RE: Security problems with caseSensitive to false
Date: Sat, 17 Mar 2007 16:28:05 -0500
> From: Giuseppe Santamaria [mailto:[EMAIL PROTECTED]
> Subject: Security problems with caseSensitive to false
>
> Is there a way to avoid which jsp code to be visible (in the browser)
> through the request "filename.JSP" , in other words calling
> the file jsp with uppercase extension?
You could write a valve or filter that detects the undesired casing and
changes it to the expected lower case. It would also be possible to use
the eight possible upper/lower case combinations in the servlet mapping
for the JspServlet in conf/web.xml (you should also do the 16 mappings
for *.jspx at the same time).
- Chuck
THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
_________________________________________________________________
Hotmail 1 GB: ancora più spazio per i tuoi messaggi e foto! GRATIS!
http://specials.it.msn.com/hotmail.aspx
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
