Filters, Security, Tomcat and Configuration 2006-11-16 - By James Crosson
Back
Greetings,
I am attempting to configure Tomcat (5.5.9) to disregard URL requests that
contain "../" and similar high-risk expressions. So far I have been
unsuccesful. I recognize two possibilities here:
A. Use <url-pattern> in the web.xml to identify this URL and disregard it
B. Configure a filter that intercepts requests and dissects the URL.
I am wondering if anybody has had experience using Tomcat in this manner,
and if there may be some examples, working filters/strategies that I could
view to get me going.
I believe that a <url-pattern> strategy will be more trouble than it is
worth beacuse it seems you can't pass a regular expression, but so far I
have not been able to nail down a Filter.
James Crosson
-- ---- ---- ---- ---- ----
James.Crosson@(protected)
Google Talk: James Crosson
-- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ------
To start a new topic, e-mail: users@(protected)
To unsubscribe, e-mail: users-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)
|
|
