Hello,
if I place e.g. calc.exe in the root folder of a stock Tomcat, it doesn’t seem
to work:
curl http://localhost/calc.exe -vv
--> exe is found
curl http://localhost/calc.exe/ -vv
--> I receive a 404 error
It seems your application is somehow allowing the download or your
configuration.
Pe
Hello,
maybe this stackoverflow page helps already:
https://stackoverflow.com/questions/9862746/restrict-allow-file-access-in-tomcat-based-on-file-extension-via-whitelist
Your snippet of the web.xml is just a configuration if an unknown servlet.
If the corresponding servlet is custom, you need