Github user thiagoh commented on the pull request:

    https://github.com/apache/tomcat/pull/6#issuecomment-42244563
  
    @kkolinko I think that this duplicated documentation would be nice to have 
inside the `server.xml` just as other documentation for other ports like 
    ```
    <!-- A "Connector" represents an endpoint by which requests are received...
    ```
    or
    ```
     <!-- Define a SSL HTTP/1.1 Connector on port 8443
             This connector uses the BIO implementation that requires the JSSE
             style configuration. When using the APR/native implementation, the
             OpenSSL style configuration is required as described in the 
APR/native
             documentation -->
        <!--
    ```
    
    I insist on that because this port could be used as a security flaw if a 
program running inside the network simulates the localhost machine sending the 
shutdown signal. Once this documentation is inside the `server.xml` it's more 
easy to pay attention on this configuration instead of goind to the web look 
for it.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to