users@glassfish.java.net

Re: Can download jarfiles from WEB-INF in Glassfish V1

From: <glassfish_at_javadesktop.org>
Date: Thu, 23 Aug 2007 07:07:09 PDT

Great, this is the solution I was looking for. I had it fixed temporarily in our front Apache httpd server, with a

<Location ~ [wW][eE][bB]-[iI][nN][fF]>
        AllowOverride None
        Deny from all
</Location>

directive for every <VirtualHost> (we are using mod_proxy_ajp), but I much prefer getting it blocked at the servlet container level.

Thanks!
[Message sent by forum member 'fraxion' (fraxion)]

http://forums.java.net/jive/thread.jspa?messageID=232304