axis-java-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Greg Truty" <gtr...@us.ibm.com>
Subject COMMITTERS: JWS security issue and a question
Date Mon, 28 Jan 2002 16:35:57 GMT
Glen,

You may also think of allowing the creation of the .class files in some
other location (other than WEB-INF).  This is similar to how .JSPs work and
I know that we had requirements within WebSphere to NOT alter the installed
application but instead point to another location (temporary directory).
Just trying to ensure it's kept flexible.

Regards...Greg

Greg Truty



Glen Daniels <gdaniels@macromedia.com> on 01/25/2002 09:38:33 AM

Please respond to axis-dev@xml.apache.org

To:    "'axis-dev@xml.apache.org'" <axis-dev@xml.apache.org>
cc:

Subject:    COMMITTERS: JWS security issue and a question





Right now, JWS files compile to the root directory of the webapp.  This is
bad news, in that people can get the *.class files very easily.

Any objections to making JWS files compile into WEB-INF/jws-classes or
something similar under WEB-INF?

--Glen





Mime
View raw message