are you using Tomcat 5.0 (JBoss 4.0.1) or 5.5 (JBoss 4.0.2) ?
to disable directory listings you should add this to your web.xml: <init-param> <param-name>listings</param-name> <param-value>false</param-value> </init-param> this is set by default in the latest versions, for security related features I recommend using the latest bpm4struts version, upgrade your AndroMDA to 3.1-RC1-SNAPSHOT if you can many improvements concerning security have been implemented: error pages, JSP security, etc... -- Wouter Zoons - [EMAIL PROTECTED] http://www.andromda.org/ _________________________________________________________ Reply to the post : http://galaxy.andromda.org/forum/viewtopic.php?p=3937#3937 Posting to http://forum.andromda.org/ is preferred over posting to the mailing list! ------------------------------------------------------- SF.Net email is Sponsored by the Better Software Conference & EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf _______________________________________________ Andromda-user mailing list Andromda-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/andromda-user
