André Warnier wrote:Ooops. I forgot to add this : in the /thewebapp-internal, you should also have a filter, this time which /blocks/ the request if it does /not/ come from 127.0.0.1. Otherwise people not from 127.0.0.1 would be able to hit it directly, just by knowing the /thewebapp-internal URL.
--------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org