DO NOT REPLY [Bug 25625] - Security Restrictions don't apply to initial page

2003-12-18 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25625.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25625

Security Restrictions don't apply to initial page

[EMAIL PROTECTED] changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution||INVALID



--- Additional Comments From [EMAIL PROTECTED]  2003-12-18 14:38 ---
Security constraints are defined on the incoming URL. The incoming URL is not
/common/* so the contraint doesn't apply.

Side note: it is not recommended to use paths with / in it as welcome files. 
BAD: welcome-file/common/examplePage.jsp/welcome-file
GOOD: welcome-fileexamplePage.jsp/welcome-file

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 25625] - Security Restrictions don't apply to initial page

2003-12-18 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25625.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25625

Security Restrictions don't apply to initial page





--- Additional Comments From [EMAIL PROTECTED]  2003-12-18 14:58 ---
O.K, I thought it was a bug, because in tomcat 4 it works flawlessly

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 25625] - Security Restrictions don't apply to initial page

2003-12-18 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25625.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25625

Security Restrictions don't apply to initial page





--- Additional Comments From [EMAIL PROTECTED]  2003-12-18 15:07 ---
Tomcat 4 issues an external redirect of welcome files so after the redirect is
performed, the security constraint may be applied.

Tomcat5 does an internal forwards. (Which is also legal according to the spec)

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]