-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Michael,

On 12/13/2010 8:04 AM, Kaps, Michael wrote:
> Unfortunately if I try to request jsp-Files via Port 80 (Apache2) I
> only get the source code back.

You have probably set Apache DocumentRoot = webapp docBase (or a similar
Alias), which is a dangerous thing to do. If you change your JkMount to
include only *.jsp, you'll suddenly open your configuration up to
requests like this:

http://host/jsp-examples/WEB-INF/web.xml

Oops.

If you are mapping /jsp-examples/* to Tomcat, there's no need to also
use an Alias or DocumentRoot that points to the same place.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk0Gh04ACgkQ9CaO5/Lv0PDGIgCgrtEaO+DruMxuU6KlH15jpMe+
vx4An2WbFz2CSxqlujMgSa4vySIrD3RA
=s0Rg
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to