So how does one get around this issue

ie, how do you have an include file that is not accessable by a user, do people
set up a secure folder for these?

Any suggestions?
- Duncan

Tim Funk wrote:

> I would think this is a security fix. (Or a bug fix) I am surprised this was
> allowed in 4.0.
>
> -Tim
>
> Duncan wrote:
>
> > When using Tomcat 4.0, I was able to include files in a directory above
> > my public web directory, but with tomcat 4.1, when I try to run the same
> > jsp, I get the error:
> >
> > org.apache.jasper.JasperException: /main.jsp(3,0) File
> > "../Private/NormalTemplate.inc" not found
> >
> > All casing etc is correct.
> >
> > Is this a security fix, or should this still be possible?
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to