You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by jo...@wellsfargo.com.INVALID on 2021/12/11 02:02:24 UTC

Disable a library in Tomcat configuration

Is there a way to forcibly prevent a library from loading in Tomcat during startup that will also prevent an app from loading the library?

Trying to find­ a way to block vulnerabilities.


Thanks,


Sent with BlackBerry Work (www.blackberry.com)

RE: Disable a library in Tomcat configuration

Posted by jo...@wellsfargo.com.INVALID.
Thanks Mark­


Thanks,


Sent with BlackBerry Work (www.blackberry.com)
________________________________
From: Mark Thomas <ma...@apache.org>
Sent: Dec 11, 2021 2:23 AM
To: users@tomcat.apache.org
Subject: Re: Disable a library in Tomcat configuration

On 11/12/2021 02:02, jonmcalexander@wellsfargo.com.INVALID wrote:
> Is there a way to forcibly prevent a library from loading in Tomcat during startup that will also prevent an app from loading the library?
>
> Trying to find­ a way to block vulnerabilities.

Dependencies are rarely optional. Blocking a library from loading is
likely to break the application.

Tomcat does not provide such a feature.

You could probably do it with a custom web resources implementation but
that would be non-trivial and, as I said above, likely to break apps.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: Disable a library in Tomcat configuration

Posted by Mark Thomas <ma...@apache.org>.
On 11/12/2021 02:02, jonmcalexander@wellsfargo.com.INVALID wrote:
> Is there a way to forcibly prevent a library from loading in Tomcat during startup that will also prevent an app from loading the library?
> 
> Trying to find­ a way to block vulnerabilities.

Dependencies are rarely optional. Blocking a library from loading is 
likely to break the application.

Tomcat does not provide such a feature.

You could probably do it with a custom web resources implementation but 
that would be non-trivial and, as I said above, likely to break apps.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org