You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by ma...@apache.org on 2013/10/13 17:11:53 UTC

svn commit: r1531698 - /tomcat/trunk/webapps/docs/default-servlet.xml

Author: markt
Date: Sun Oct 13 15:11:53 2013
New Revision: 1531698

URL: http://svn.apache.org/r1531698
Log:
Note requirements for securing the gzipped version of a file.

Modified:
    tomcat/trunk/webapps/docs/default-servlet.xml

Modified: tomcat/trunk/webapps/docs/default-servlet.xml
URL: http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/default-servlet.xml?rev=1531698&r1=1531697&r2=1531698&view=diff
==============================================================================
--- tomcat/trunk/webapps/docs/default-servlet.xml (original)
+++ tomcat/trunk/webapps/docs/default-servlet.xml Sun Oct 13 15:11:53 2013
@@ -99,6 +99,10 @@ directory listings are disabled and debu
         appended to the file name located alongside the original file), Tomcat
         will serve the gzipped file if the user agent supports gzip and this
         option is enabled. [true]
+        <br />
+        The file with the <code>.gz</code> extension will be accessible if
+        requested directly so if the original resource is protected with a
+        security constraint, the gzipped version must be similarly protected.
   </property>
   <property name="readmeFile">
         If a directory listing is presented, a readme file may also



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org