본문 바로가기

Programming/Java

java security manager web-inf 파일 보안이 되는 이유

반응형

Anil Sharma wrote:Hi,
Thanks for your valuable suggestions.

I know that we can't access resources inside the WEB-INF by directly using URL to protect them.
I think the way which I put my question is not correct.

I should ask like �what things (factors) are responsible to prevent the access of resources inside WEB-INF in the web application?� Is there any mapping defined in the server for that or what?

Please send your valuable suggestions.



Anil that is a nice questions.
Java SecurityManager is the one responsible for making this rule by granting permission to WEB-INF in policy file format.
looks like you can give such capability given to WEB-INF to your desired directory by editing :
$CATALINA_HOME/conf/catalina.policy file.
for more information go through this link (its interesting) 


apache tomcat-java SecurityManager

반응형