> All, > > I recently gave a presentation on locking-down Apache Tomcat[1] and I > briefly discussed the "sharp edges" present in Tomcat. Some of them > are unnecessarily sharp and may be actually unnecessary. I'm going to > make a few proposals to remove functions from Tomcat. > > Proposal: Remove Server-Side Includes
+1 > If the packaging of Tomcat could be tweaked a bit to move the SSI > components into a separate JAR file (e.g. move > org/apache/catalina/ssi/* to catalina-ssi.jar) and if the SSI > components don't rely on any Tomcat specific capabilities or > internals, then the cattalina-ssi.jar file could be used between > Tomcat versions. For example, a user of Tomcat 10 who still needs SSI > could get the SSI module from a distribution of Tomcat 8.5.x or 9.x. Even if it depends on Tomcat internals, as long as those internals are there in 10.0.x (and the same as 9.0.x) that would be an option. This is something we could be looking at now. Mark --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
