RE: Security problems with caseSensitive to false

2007-03-19 Thread Giuseppe Santamaria
thanks From: Caldarale, Charles R [EMAIL PROTECTED] Reply-To: Tomcat Users List users@tomcat.apache.org To: Tomcat Users List users@tomcat.apache.org Subject: RE: Security problems with caseSensitive to false Date: Sat, 17 Mar 2007 16:28:05 -0500 From: Giuseppe Santamaria [mailto:[EMAIL

RE: Security problems with caseSensitive to false

2007-03-19 Thread Giuseppe Santamaria
thanks From: Caldarale, Charles R [EMAIL PROTECTED] Reply-To: Tomcat Users List users@tomcat.apache.org To: Tomcat Users List users@tomcat.apache.org Subject: RE: Security problems with caseSensitive to false Date: Sat, 17 Mar 2007 16:28:05 -0500 From: Giuseppe Santamaria [mailto:[EMAIL

RE: Security problems with caseSensitive to false

2007-03-19 Thread Caldarale, Charles R
From: Giuseppe Santamaria [mailto:[EMAIL PROTECTED] Subject: RE: Security problems with caseSensitive to false but in in FAQ Windows http://tomcat.apache.org/faq/windows.html there is this paragraph Can I turn off case sensitivity? Yes with the link Yes to the Resources Component

Security problems with caseSensitive to false

2007-03-17 Thread Giuseppe Santamaria
Hi I know which to set tomcat for the NOT case sensitive, necessity to use the Context caseSensitive=false of the web application. but this documentation (http://tomcat.apache.org/tomcat-5.5-doc/config/context.html ) say NOTE: This flag MUST NOT be set to false on the Windows platform (or

RE: Security problems with caseSensitive to false

2007-03-17 Thread Caldarale, Charles R
From: Giuseppe Santamaria [mailto:[EMAIL PROTECTED] Subject: Security problems with caseSensitive to false Is there a way to avoid which jsp code to be visible (in the browser) through the request filename.JSP , in other words calling the file jsp with uppercase extension? You could