The proverbial $.02 of opinion: If the customer owns the directory, then doesn't the customer also own the decision to allow files in it to be listed?
Seems like it is an easier documentation problem to explain how to prevent listings ("include an index.html file in your directory if you don't want...blah blah blah") than to explain how to edit the global web.xml file. Also a less perilous task for the user, since a typo in the web.xml file could screw up everything.
Jerry
Ben Souther wrote:
That would do except that we are allowing customers to create directories and have no guarantee that the welcome file will exist there.
It would be nice if we could disable directory listing for the entire app from within the war file. We have no guarantee that they won't be using the same instance of Tomcat for other apps and we are hoping to avoid walking customers through editing the global web.xml file.
It's starting to look like this isn't possible.. :-(
On Thursday 19 February 2004 05:44 pm, Parsons Technical Services wrote:
If I understand the notes correctly, if you simply include a welcome file then TC will not serve up the directory listing. This is also how my setup acts. It will not show the directory for my app which has an index file. And the global web.xml is untouched.
See the notes in the global web.xml and Servlet 2.4 specifications.
Doug www.parsonstechnical.com
----- Original Message ----- From: "Ben Souther" <[EMAIL PROTECTED]> To: "Tomcat Users List" <[EMAIL PROTECTED]> Sent: Thursday, February 19, 2004 4:54 PM Subject: Disable Directory Listing for Specific Apps.
Is it possible to disable directory listings for a specific web app as opposed to editing the global web.xml file in TOMCAT_HOME/conf/web.xml?
We would like to ship our app as a war file and don't want require that our customers make global changes to Tomcat for it to behave properly.
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
