Author: markt
Date: Tue Mar 22 08:57:12 2011
New Revision: 1084109

URL: http://svn.apache.org/viewvc?rev=1084109&view=rev
Log:
Prevent the custom error pages for the Manager and Host Manager applications 
from being accessed directly.

Added:
    tomcat/trunk/webapps/host-manager/WEB-INF/jsp/
    tomcat/trunk/webapps/host-manager/WEB-INF/jsp/401.jsp
      - copied unchanged from r1084103, 
tomcat/trunk/webapps/host-manager/401.jsp
    tomcat/trunk/webapps/host-manager/WEB-INF/jsp/403.jsp
      - copied unchanged from r1084103, 
tomcat/trunk/webapps/host-manager/403.jsp
    tomcat/trunk/webapps/host-manager/WEB-INF/jsp/404.jsp
      - copied unchanged from r1083892, 
tomcat/trunk/webapps/host-manager/404.jsp
    tomcat/trunk/webapps/manager/WEB-INF/jsp/401.jsp
      - copied unchanged from r1084103, tomcat/trunk/webapps/manager/401.jsp
    tomcat/trunk/webapps/manager/WEB-INF/jsp/403.jsp
      - copied unchanged from r1084103, tomcat/trunk/webapps/manager/403.jsp
    tomcat/trunk/webapps/manager/WEB-INF/jsp/404.jsp
      - copied unchanged from r1083892, tomcat/trunk/webapps/manager/404.jsp
Removed:
    tomcat/trunk/webapps/host-manager/401.jsp
    tomcat/trunk/webapps/host-manager/403.jsp
    tomcat/trunk/webapps/host-manager/404.jsp
    tomcat/trunk/webapps/manager/401.jsp
    tomcat/trunk/webapps/manager/403.jsp
    tomcat/trunk/webapps/manager/404.jsp
Modified:
    tomcat/trunk/webapps/docs/changelog.xml
    tomcat/trunk/webapps/host-manager/WEB-INF/web.xml
    tomcat/trunk/webapps/manager/WEB-INF/web.xml

Modified: tomcat/trunk/webapps/docs/changelog.xml
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/changelog.xml?rev=1084109&r1=1084108&r2=1084109&view=diff
==============================================================================
--- tomcat/trunk/webapps/docs/changelog.xml (original)
+++ tomcat/trunk/webapps/docs/changelog.xml Tue Mar 22 08:57:12 2011
@@ -126,6 +126,10 @@
         Align the authenticator documentation and MBean descriptors with the
         implementation. (markt)
       </fix>
+      <fix>
+        Prevent the custom error pages for the Manager and Host Manager
+        applications from being accessed directly. (markt)
+      </fix>
     </changelog>
   </subsection>
   <subsection name="Other">

Modified: tomcat/trunk/webapps/host-manager/WEB-INF/web.xml
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/webapps/host-manager/WEB-INF/web.xml?rev=1084109&r1=1084108&r2=1084109&view=diff
==============================================================================
--- tomcat/trunk/webapps/host-manager/WEB-INF/web.xml (original)
+++ tomcat/trunk/webapps/host-manager/WEB-INF/web.xml Tue Mar 22 08:57:12 2011
@@ -116,15 +116,15 @@
 
   <error-page>
     <error-code>401</error-code>
-    <location>/401.jsp</location>
+    <location>/WEB-INF/jsp/401.jsp</location>
   </error-page>
   <error-page>
     <error-code>403</error-code>
-    <location>/403.jsp</location>
+    <location>/WEB-INF/jsp/403.jsp</location>
   </error-page>
   <error-page>
     <error-code>404</error-code>
-    <location>/404.jsp</location>
+    <location>/WEB-INF/jsp/404.jsp</location>
   </error-page>
   
 </web-app>

Modified: tomcat/trunk/webapps/manager/WEB-INF/web.xml
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/webapps/manager/WEB-INF/web.xml?rev=1084109&r1=1084108&r2=1084109&view=diff
==============================================================================
--- tomcat/trunk/webapps/manager/WEB-INF/web.xml (original)
+++ tomcat/trunk/webapps/manager/WEB-INF/web.xml Tue Mar 22 08:57:12 2011
@@ -181,15 +181,15 @@
 
   <error-page>
     <error-code>401</error-code>
-    <location>/401.jsp</location>
+    <location>/WEB-INF/jsp/401.jsp</location>
   </error-page>
   <error-page>
     <error-code>403</error-code>
-    <location>/403.jsp</location>
+    <location>/WEB-INF/jsp/403.jsp</location>
   </error-page>
   <error-page>
     <error-code>404</error-code>
-    <location>/404.jsp</location>
+    <location>/WEB-INF/jsp/404.jsp</location>
   </error-page>
 
 </web-app>



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to