You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by ma...@apache.org on 2013/10/13 17:11:53 UTC
svn commit: r1531698 - /tomcat/trunk/webapps/docs/default-servlet.xml
Author: markt
Date: Sun Oct 13 15:11:53 2013
New Revision: 1531698
URL: http://svn.apache.org/r1531698
Log:
Note requirements for securing the gzipped version of a file.
Modified:
tomcat/trunk/webapps/docs/default-servlet.xml
Modified: tomcat/trunk/webapps/docs/default-servlet.xml
URL: http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/default-servlet.xml?rev=1531698&r1=1531697&r2=1531698&view=diff
==============================================================================
--- tomcat/trunk/webapps/docs/default-servlet.xml (original)
+++ tomcat/trunk/webapps/docs/default-servlet.xml Sun Oct 13 15:11:53 2013
@@ -99,6 +99,10 @@ directory listings are disabled and debu
appended to the file name located alongside the original file), Tomcat
will serve the gzipped file if the user agent supports gzip and this
option is enabled. [true]
+ <br />
+ The file with the <code>.gz</code> extension will be accessible if
+ requested directly so if the original resource is protected with a
+ security constraint, the gzipped version must be similarly protected.
</property>
<property name="readmeFile">
If a directory listing is presented, a readme file may also
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org