Re: Tomcat minor update

2023-10-20 Thread Christopher Schultz
Aditya, On 10/19/23 14:42, Aditya Shastri wrote: The way I do the start.sh in my Catalina base is: BASEDIR=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )/.. export CATALINA_BASE=$(realpath ${BASEDIR}) /opt/tomcat/tomcat-9/tomcat-9-latest/bin/startup.sh I could just say $

Re: Dealing with an insecure Struts application on Tomcat

2023-10-20 Thread Greg Huber
Remember seeing this, a maintained version of Struts 1. Might be work a look. https://github.com/weblegacy/struts1 On Thu, 19 Oct 2023 at 17:45, Alan F wrote: > I am looking at security steps to mitigate issues with a 1.x Struts based > app. > > I have recommended the following until an upgrad

Re: Dealing with an insecure Struts application on Tomcat

2023-10-20 Thread Christopher Schultz
Greg, On 10/20/23 11:52, Greg Huber wrote: Remember seeing this, a maintained version of Struts 1. Might be work a look. https://github.com/weblegacy/struts1 This is interesting. I knew about this one: https://github.com/kawasima/struts1-forever But the weblegacy folks look *serious* about