users@glassfish.java.net

Re: WEB-INF dot file retrieval vulnerability on Win32 boxes

From: <glassfish_at_javadesktop.org>
Date: Mon, 11 Aug 2008 16:52:06 PDT

yes.

the man page for create-virtual-server discussed setting the property in sun-web.xml.

I know how to edit the sun-web.xml file and redeploy, so it was the easiest way for me to try it out.

vbk
[Message sent by forum member 'vbkraemer' (vbkraemer)]

http://forums.java.net/jive/thread.jspa?messageID=292723