AW: Apache Tomcat 8 - Require Tomcat configuration to restrict exe's from downloading

2022-06-22 Thread Thomas Hoffmann (Speed4Trade GmbH)
Hello, if I place e.g. calc.exe in the root folder of a stock Tomcat, it doesn’t seem to work: curl http://localhost/calc.exe -vv --> exe is found curl http://localhost/calc.exe/ -vv --> I receive a 404 error It seems your application is somehow allowing the download or your configuration. Pe

AW: Apache Tomcat 8 - Require Tomcat configuration to restrict exe's from downloading

2022-06-20 Thread Thomas Hoffmann (Speed4Trade GmbH)
Hello, maybe this stackoverflow page helps already: https://stackoverflow.com/questions/9862746/restrict-allow-file-access-in-tomcat-based-on-file-extension-via-whitelist Your snippet of the web.xml is just a configuration if an unknown servlet. If the corresponding servlet is custom, you need