Re: deployXML question.

2006-05-01 Thread Mark Thomas
BATCHELOR, SCOTT (CONTRACTOR) wrote: > Could anyone shed some litght on this question? Or possibly point me in > the right direction for documentation. Have a read of http://tomcat.apache.org/tomcat-5.5-doc/config/context.html With deployXML=true you have control over privileged, crossContext for

RE: deployXML question.

2006-05-01 Thread BATCHELOR, SCOTT \(CONTRACTOR\)
List Subject: deployXML question. The deployXML attribute in the server.xml is defaulted to true. In the Tomcat Docs it states this: Security consious environments should set this to false to prevent applications from interacting with the container's configuration. Can anyone explain wha

deployXML question.

2006-04-26 Thread BATCHELOR, SCOTT \(CONTRACTOR\)
The deployXML attribute in the server.xml is defaulted to true. In the Tomcat Docs it states this: Security consious environments should set this to false to prevent applications from interacting with the container's configuration. Can anyone explain what the exposure might be by leaving this