Amit,

On 9/25/26 1:08 PM, Amit Pande via users wrote:
Hello,

A curious question: Does Tomcat need to package the default web
applications with it? Tomcat experts continue to recommend removing
these for production deployments, and most of the consumers (like us)
honor this recommendation.

If Tomcat could just host these applications separately, whoever
wanted to download/use, they could be free to do so.

By not shipping them with Tomcat binaries, there will be one less
area to worry about (keeping the flux of CVEs in mind).

I am sure there must be some valid reason behind shipping the default
applications, just wanted to know what the thought process is.

The thought process is that some novice users want to be able to check
that their environment is working properly before doing anything else.

-chris


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to