Author: markt Date: Sun Oct 13 15:11:53 2013 New Revision: 1531698 URL: http://svn.apache.org/r1531698 Log: Note requirements for securing the gzipped version of a file.
Modified: tomcat/trunk/webapps/docs/default-servlet.xml Modified: tomcat/trunk/webapps/docs/default-servlet.xml URL: http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/default-servlet.xml?rev=1531698&r1=1531697&r2=1531698&view=diff ============================================================================== --- tomcat/trunk/webapps/docs/default-servlet.xml (original) +++ tomcat/trunk/webapps/docs/default-servlet.xml Sun Oct 13 15:11:53 2013 @@ -99,6 +99,10 @@ directory listings are disabled and debu appended to the file name located alongside the original file), Tomcat will serve the gzipped file if the user agent supports gzip and this option is enabled. [true] + <br /> + The file with the <code>.gz</code> extension will be accessible if + requested directly so if the original resource is protected with a + security constraint, the gzipped version must be similarly protected. </property> <property name="readmeFile"> If a directory listing is presented, a readme file may also --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org