----------------------------------------------------------------
BEFORE YOU POST, search the faq at <http://java.apache.org/faq/>
WHEN YOU POST, include all relevant version numbers, log files,
and configuration files. Don't make us guess your problem!!!
----------------------------------------------------------------
As a security measure, is there an option in JServ to turn of reference to
classes by name, so that only specific Servlet Aliases specifiied in the zone
properties file will work as URL's? I know how to this (kludgely) with URL
rewriting in the webserver but it would be nice simply to turn it off in the
appserver.
If not, I'm tempted to crank up a patch myself, it would be a useful feature.
Cheers
Dave
--
--------------------------------------------------------------
Please read the FAQ! <http://java.apache.org/faq/>
To subscribe: [EMAIL PROTECTED]
To unsubscribe: [EMAIL PROTECTED]
Search Archives:
<http://www.mail-archive.com/java-apache-users%40list.working-dogs.com/>
Problems?: [EMAIL PROTECTED]
