Hi There,

I'm currently working with the Gradle project which is used to design an
web services to deploy in the Jetty web server in the location "*C:\Program
Files\jetty\mt-base\webapps*" as .WAR file. When I run the Jetty services,
my services working fine as expected but what worrying me is, Jetty
allowing the WAR file for modification even when Jetty is running and thus
reloading the services to have effect on the server response for the client
request.

This allows for malicious tampering of the WAR file and we are looking to
protect this from happening.

My question is, *Is there any Jetty configuration to lock the web
application file while the service is up and running (I.E., lock all files
inside "C:\Program Files\jetty\mt-base\webapps" folder)? If Yes, could you
let me know how to setup the configurations for me, please?*

However, I do see a facility *'useFileMappedBuffer'* property in the link
https://wiki.eclipse.org/Jetty/Reference/webdefault.xml for memory-mapping
of files for the Jetty services. I'm currently trying this to see if I can
achieve my need. Could you elaborate the statement "*Jetty buffers static
content for webapps such as HTML files, CSS files, images, etc. If you are
using NIO connectors, Jetty uses memory-mapped files to do this.*" in the
link https://wiki.eclipse.org/Jetty/Reference/webdefault.xml? What does NIO
connectors mean? How to implement in my Jetty?

Current Jetty I'm using is *Jetty (x64) 1.4.0.56668 *
OS - Windows 10 Enterprise

Thanks in advance!
_______________________________________________
jetty-users mailing list
[email protected]
To change your delivery options, retrieve your password, or unsubscribe from 
this list, visit
https://www.eclipse.org/mailman/listinfo/jetty-users

Reply via email to