This might seem like a strange request, but I would like to use Tomcat to only serve static files, from a certain context anyway.
I have an application I would like to allow users to upload files through, and then I want to be able to link to them and serve them from the server. If I do this, I run the risk of them uploading executable content (e.g. a JSP file) and then having it executed on the server, so I would like to stop this happening. Does anyone know how I could prevent any dynamic processing of files in a given Tomcat context. I appreciate I could just install Apache and do it that way but I'd rather just keep it simple with Tomcat. Thanks. -- View this message in context: http://www.nabble.com/Tomcat-for-serving-only-static-files---how-to-prevent-the-likes-of-JSP-execution-tp24338874p24338874.html Sent from the Tomcat - User mailing list archive at Nabble.com. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
