Hi,
No, they can't be viewed directly: the servlet container is prohibited
from serving content under WEB-INF directories by the Servlet
Specification. This is strictly implemented by all servlet container I
know of, and is easy to test in your installation by trying to access
the image under
However, if you run Tomcat behind Apache, you should ensure that
none of your WEB-INF folders will be served by Apache.
- Original Message -
From: Shapira, Yoav [EMAIL PROTECTED]
To: Tomcat Users List [EMAIL PROTECTED]
Sent: Thursday, June 17, 2004 6:53 PM
Subject: RE: Safety of images
