You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@geronimo.apache.org by "Aaron Mulder (JIRA)" <de...@geronimo.apache.org> on 2005/08/27 04:05:05 UTC
[jira] Updated: (GERONIMO-479) Root of WebApp Displays WEB-INF and META-INF Directories
[ http://issues.apache.org/jira/browse/GERONIMO-479?page=all ]
Aaron Mulder updated GERONIMO-479:
----------------------------------
Fix Version: 1.0-M5
Description:
I deployed a simple webapp containing nothing more than a web.xml. There is no welcome.jsp configured or provided.
The deploy was OK, but when I browse to http://localhost:8080/testbed I see a directory listing, with the directories WEB-INF and META-INF listed. This, itself, should not happen.
When clicking on WEB-INF, I generate a StackOverflow. I would expect a nice "Forbidden" message, or even a 404 (or whatever the Servlet spec says).
was:
I deployed a simple webapp containing nothing more than a web.xml. There is no welcome.jsp configured or provided.
The deploy was OK, but when I browse to http://localhost:8080/testbed I see a directory listing, with the directories WEB-INF and META-INF listed. This, itself, should not happen.
When clicking on WEB-INF, I generate a StackOverflow. I would expect a nice "Forbidden" message, or even a 404 (or whatever the Servlet spec says).
Priority: Critical (was: Major)
This should be reviewed for M5
> Root of WebApp Displays WEB-INF and META-INF Directories
> --------------------------------------------------------
>
> Key: GERONIMO-479
> URL: http://issues.apache.org/jira/browse/GERONIMO-479
> Project: Geronimo
> Type: Bug
> Components: web
> Versions: 1.0-M3
> Environment: WinXP, JDK 1.4.2
> Reporter: Seth Ladd
> Priority: Critical
> Fix For: 1.0-M5
> Attachments: listBug.ear
>
> I deployed a simple webapp containing nothing more than a web.xml. There is no welcome.jsp configured or provided.
> The deploy was OK, but when I browse to http://localhost:8080/testbed I see a directory listing, with the directories WEB-INF and META-INF listed. This, itself, should not happen.
> When clicking on WEB-INF, I generate a StackOverflow. I would expect a nice "Forbidden" message, or even a 404 (or whatever the Servlet spec says).
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira