How to limit access to a path in Tomcat?

[Laura Heinzmann]

Hi:

Currently a tomcat installation I have shows content that I do not wish
to have available to external users.

i.e. www.a.com/WEB-INF/ROOT/classes/files

Is there a way I can prevent users seeing the above?

Thank you for helping me out

LH

 

[Aquila Deus]

Hi:

Currently a tomcat installation I have shows content that I do not wish
to have available to external users.

i.e. www.a.com/WEB-INF/ROOT/classes/files

Is there a way I can prevent users seeing the above?

Read about <security-constraint> in web.xml

BTW I'm wondering why there isn't an official servlet like
FileNotAvailableServlet so that I can map forbidden path to it?

 

[Symon]

If you use Tomcat with Apache as webserver. You can add that to your
httpd.cond file :

<Location "/WEB-INF/ROOT/classes/files">
AllowOverride None
deny from all
</Location>

Symon

 

[Tor Iver Wilhelmsen]

i.e. www.a.com/WEB-INF/ROOT/classes/files

Unless you do something wrong, nothing in a web app's WEB-INF
directory should ever be visible to a user. Try checking where you
have put the actual web-app.