I would think this is a security fix. (Or a bug fix) I am surprised this was allowed in 4.0.

-Tim

Duncan wrote:

When using Tomcat 4.0, I was able to include files in a directory above
my public web directory, but with tomcat 4.1, when I try to run the same
jsp, I get the error:

org.apache.jasper.JasperException: /main.jsp(3,0) File
"../Private/NormalTemplate.inc" not found

All casing etc is correct.

Is this a security fix, or should this still be possible?


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Reply via email to