You are viewing a plain text version of this content. The canonical link for it is here.

Posted to java-dev@axis.apache.org by bu...@apache.org on 2002/03/29 07:33:44 UTC

DO NOT REPLY [Bug 7601] New: - [Security] generated .class files can be downloaded on tomcat

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=7601>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=7601

[Security] generated .class files can be downloaded on tomcat

           Summary: [Security] generated .class files can be downloaded on
                    tomcat
           Product: Axis
           Version: beta-1
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: Deployment / Registries
        AssignedTo: axis-dev@xml.apache.org
        ReportedBy: steve_l@iseran.com


The generated class files from JWS pages can be downloaded if you ask for them
http://localhost:8080/axis/SearchService.class

...the web.xml needs to be set up to prevent access to *.class files.