|
|
Rank: Apprentice Coder
Groups: Member
Joined: 2/22/2012
Posts: 46
Points: -262
Location: France
|
Hello,
WebORB running with Jetty, is it can be secured to prevent directories to list the contents, with a htaccess-like file?
If so, how should I do to avoid interfering with the installation WebORB?
Thanks in advance for your help,
Christophe
|
|
Rank: Administration
Groups: Administration
Joined: 8/21/2006
Posts: 1,607
Points: 4,082
Location: Frisco, TX
|
Hi Christophe, Please see the following discussion which looks like has an answer to your question: http://www.coderanch.com/t/92020/java/Disable-Directory-Listings-Jetty-webcontainerRegards, Mark
Mark Piller Midnight Coders, Inc. twitter: midnightcoderblog: blog.themidnightcoders.comwebsite: www.themidnightcoders.com
|
|
Rank: Apprentice Coder
Groups: Member
Joined: 2/22/2012
Posts: 46
Points: -262
Location: France
|
Hi Mark,
A big thank you for the link.
I also want to tell you that WebWORB is amazing! I set up the datapush and it works perfectly!!!
Best regards,
Christophe
|
|
Rank: Apprentice Coder
Groups: Member
Joined: 2/22/2012
Posts: 46
Points: -262
Location: France
|
Hi Mark,
Does WebORB (based on Jetty) has a file webdefault.xml (I did not find a priori) or an equivalent file?
I don't know where to place the code to disable directory listing.
Do I create a file webdefault.xml for this?
Thanks in advance,
Regards,
Christophe
|
|
Rank: Administration
Groups: Administration
Joined: 8/21/2006
Posts: 1,607
Points: 4,082
Location: Frisco, TX
|
Hi Christophe, I think that file is located inside of jetty's jar file. I have not looked myself, could you check there? Regards, Mark
Mark Piller Midnight Coders, Inc. twitter: midnightcoderblog: blog.themidnightcoders.comwebsite: www.themidnightcoders.com
|
|
Rank: Apprentice Coder
Groups: Member
Joined: 2/22/2012
Posts: 46
Points: -262
Location: France
|
Hi Mark,
Indeed, webdefault.xml is placed in org.mortbay.jetty.webapp and the default value for dirAllowed is "true".
I found how to do: overriding this parameter to false from web.xml, not forgetting the load-on-startup param (set to 0) and the servlet mapping, it works perfectly !
Thank you again for showing me the way.
Regards,
Christophe
|
|
|
Guest |
