Igor Cicimov wrote:
" <Directory /usr/local/tomcat/webapps5/ROOT>
Which is usually a Bad Idea.Tomcat knows that it should not serve, e.g., the contents of a WEB-INF directory.
Apache httpd does not know that.So unless you proxy *everything* to Tomcat (which would then raise the question of why you have Apache), Apache will happily serve your WEB-INF/web.xml for instance (and anything else in there you thought was private).
--------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|