Re: Rationale for makeing Invoker harder to user

2007-03-14 Thread Paul Mendelson
Tim Funk wrote: http://tomcat.apache.org/faq/misc.html#evil -Tim Paul Mendelson wrote: I recently installed Tomacat 6.0 and see that I now need to make my web application privalaged in order to use InvokerServlet to allow users to execute arbitrary servlets. This seems to continue a trend

Rationale for makeing Invoker harder to user

2007-03-14 Thread Paul Mendelson
I recently installed Tomacat 6.0 and see that I now need to make my web application privalaged in order to use InvokerServlet to allow users to execute arbitrary servlets. This seems to continue a trend that may eventually result in Invoker being widthdrawn. My question is why is allowing exe

RE: [SPAM] RE: Best Practice for properties files

2006-06-27 Thread Paul Mendelson
nection.driver_class} ... -Original Message- From: Paul Mendelson [mailto:[EMAIL PROTECTED] Sent: Friday, June 23, 2006 9:46 AM To: Tomcat Users List Subject: Best Practice for properties files I have a fairly normal application that

Best Practice for properties files

2006-06-23 Thread Paul Mendelson
I have a fairly normal application that I am deploying on a tomcat 5.5 server. My application uses log4j for its internal logging and I have a log4j.properties file that I keep in web/WEB-INF/classes. I also have a regular app.properties file that I keep in web/WEB-INF. I deploy my application t