You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by pa...@apache.org on 2001/11/08 22:38:30 UTC
cvs commit: jakarta-tomcat-4.0/webapps/admin/WEB-INF web.xml
patrickl 01/11/08 13:38:30
Modified: webapps/admin/WEB-INF web.xml
Log:
Limit security constraint to only content pages and leave static resources (i.e. image files) unconstrained. This is done so that image static resources are not subject to the automatic "no-cache" policy that is now applied to all protected resources.
Revision Changes Path
1.3 +3 -1 jakarta-tomcat-4.0/webapps/admin/WEB-INF/web.xml
Index: web.xml
===================================================================
RCS file: /home/cvs/jakarta-tomcat-4.0/webapps/admin/WEB-INF/web.xml,v
retrieving revision 1.2
retrieving revision 1.3
diff -u -r1.2 -r1.3
--- web.xml 2001/11/06 20:40:13 1.2
+++ web.xml 2001/11/08 21:38:30 1.3
@@ -80,7 +80,9 @@
<web-resource-collection>
<web-resource-name>Protected Area</web-resource-name>
<!-- Define the context-relative URL(s) to be protected -->
- <url-pattern>/*</url-pattern>
+ <url-pattern>*.jsp</url-pattern>
+ <url-pattern>*.do</url-pattern>
+ <url-pattern>*.html</url-pattern>
</web-resource-collection>
<auth-constraint>
<!-- Anyone with one of the listed roles may access this area -->
--
To unsubscribe, e-mail: <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>