users@glassfish.java.net

Re: WEB-INF dot file retrieval vulnerability on Win32 boxes

From: <glassfish_at_javadesktop.org>
Date: Mon, 11 Aug 2008 16:05:44 PDT

Thanks, Vince!

The link you mention is about "create-virtual-server", but you really were referring to the "allowLinking" property in sun-web.xml, right?.
[Message sent by forum member 'jluehe' (jluehe)]

http://forums.java.net/jive/thread.jspa?messageID=292717