How to prevent viewing files under WEB-INF from browser

yb_xr Jan 14, 2008 8:01 PM

Dear All,

I am using JBoss with Tomcat to run my web application. I just found that I can view the files under WEB-INF (e.g. web.xml) from browser. Does any one knows how to prevent this from happening?

Thanks & regards,

yb_xr

1. Re: How to prevent viewing files under WEB-INF from browser

peterj Jan 15, 2008 11:07 AM (in response to yb_xr)

What version of JBossAS are you using? I tried this on both 5.0 beta3 and 4.2.2 and was not able to access any content under WEB-INF.
Actions
2. Re: How to prevent viewing files under WEB-INF from browser

yb_xr Jan 15, 2008 8:14 PM (in response to yb_xr)

Hi Peter,

I am using jboss-3.2.7, it only happen when I use https protocol.

Thanks & regards,

yx_xr
Actions
3. Re: How to prevent viewing files under WEB-INF from browser

erasmomarciano Jan 23, 2008 10:10 AM (in response to yb_xr)

I have modifies server.xml of tomcat?

By defaul tomcat does'nt show this file in WEB-INF/
Actions

Go to original post