Hi all,

in production I'm still running Ubuntu 14.04 LTS Server which provides
Tomcat 7.0.52, which doesn't contain the filter for HttpHeaderSecurity
yet[1]. Some of my customers on the other hand use Windows and run
newer versions of Tomcat which already support that filter. To not
force customers to change global Tomcat settings and to document that
my app is compatible, I would like to add HttpHeaderSecurity to the
web.xml of my own app with the correct settings. That breaks in my own
Ubuntus of course.

So, is there some way to get old and new Tomcats together if my app's
web.xml uses that filter?

Frist thing I tried was simply providing the implementation in the
classpath of my own app, which didn't work. Should that work in theory
and I most likely did something wrong or are those filters only
expected to be in the classpath of Tomcat itself? I'm using
"UrlRewriteFilter"[2] bundled with my app, configured in my web.xml
and that works.

Else, is there some condition for filters to only apply those
depending on e.g. the version of Tomcat or such? The only similar
question I found were pretty old and maybe things have changed since
then.

https://mail-archives.apache.org/mod_mbox/tomcat-users/200808.mbox/<4893749f.3070...@ice-sa.com>

Thanks for your input!

[1]: https://stackoverflow.com/a/35795122/2055163
[2]: http://tuckey.org/urlrewrite/

Mit freundlichen Grüßen,

Thorsten Schöning

-- 
Thorsten Schöning       E-Mail: thorsten.schoen...@am-soft.de
AM-SoFT IT-Systeme      http://www.AM-SoFT.de/

Telefon...........05151-  9468- 55
Fax...............05151-  9468- 88
Mobil..............0178-8 9468- 04

AM-SoFT GmbH IT-Systeme, Brandenburger Str. 7c, 31789 Hameln
AG Hannover HRB 207 694 - Geschäftsführer: Andreas Muchow


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to