Not allow the directory browsing

hello.
i have some jsp pages under a webapplication with tomcat. if an user delete the name of the page from the url (for example default.jsp), he can see the directory content.
i would like to know how not to give the users the possibility to browse the dirs.
and so how to specify a page name where the users will be redirect when they delete the name of the page from the url
thanx

How much more precision do you want? This is detailed in the web.xml dtd and there was an article in the Java Developers Journal, (available online), last month. You need to set up some security constraints in the web.xml. Are you expecting me to post you the xml tags? As for there not being anything on the jakarta site, where do you think I found information about how to secure a Tomcat server?

Similar Messages

  • Is there any way to disable or not allow the private browsing function on Firefox for Mac?

    I have 3 young preteen/teenage sons who use our family iMac as their computer. Even though I have a filter on the router to prevent them from getting into trouble, I occasionally check their browsing history just to see when/where they are browsing. On a couple of instances, there has been no history shown for certain websites I know they have visited (per the router report), so I am wondering whether they have activated private browsing to cover their tracks, and if there is parental control function to disable the Private Browsing feature in Firefox.

    Thanks Rick for your Quick replay,
    As my consultant told me , They will get lot of approval messages so we have to make only one inbox message for approval.
    When they select Yes or No , if agreement is not locked by others will get approved or rejected no problem.
    But if agreement is locked , it will get checked only after they hit approve or reject so i will be displaying a message to them that this agreement is locked Hit Cancel button and do the Task later .
    so the approver will comeback at later at 20 or 30 mins and will execute the workitem which on double clicking will execute the already selected ( approve or reject ) status change only .
    This is how i  suggested them and they said okay.
    Only problem they are saying  with LOOP is they have to refresh the SBWP inbox when ever they met with lock of agreement .
    If you still feel using loop and sending again is the best way i will try to ask them again and see.
    Thanks,
    Brahmam

  • I want to mirror an iOS device to my computer for demonstration and training purposes.  I cannot use Airserver as my company VPN does not allow the connection.  Is there a hardware solution instead?

    I want to mirror an iOS device to my computer for demonstration and training purposes.  I cannot use Airserver as my company VPN does not allow the connection.  Is there a hardware solution instead?

    Shoeb, hi.
    Thanks for replying and apologies for my tardiness in responding. I have just completed a re-creation of my web page using CSS/HTML rather than XML/XSLT and now I find that when saving in MHT format the watermark/background image is saved, which is nice, but trying to save it as 'webpage complete' under 'save as' in the browser still does not work. (For those who are new to Firefox, MHT files are not supported by the browser, but using the FF extention UnMHT one can open such files and save web documents as MHT files, meaning no accompanying folder is required to properly view the file.)

  • How to disable Refresh,Reload in browser and user should not allow to multiple browser sessions ?

    Dear All,
    How to disable Refresh,Reload in browser and end user should not allow to multiple browser sessions in portal.Where we need to configure the settings or any code in masthead or any other component. My server version is 7.4 - SP5 .Please help us.
    Thanks for advance,
    BR,
    Durga Rao.

    Dear all,
    i am able to logoff the click refresh button on keyboard.I am using this code to log off the user into the portal.
    document.onkeydown = function(e)
      var key;
      if (window.event) key = event.keyCode
      else
      var unicode = e.keyCode ? e.keyCode : e.charCode
      key = unicode
      switch (key)
      { //event.keyCode
      case 116: //F5 button
        LSAPI.sessionPlugin.logoff();
      event.returnValue = false;
      key = 0; //event.keyCode = 0;
      return false;
      case 82: //R button
      if (event.ctrlKey)
    LSAPI.sessionPlugin.logoff();
      event.returnValue = false;
      key = 0; //event.keyCode = 0;
      return false;
      case 91: // ctrl + R Button
    LSAPI.sessionPlugin.logoff();
      event.returnValue= false;
      key=0;
      return false;
    Thanks.
    But i am unable to control the multiple windows opening the browser.So any one can tell me the how to block the new window and new tab/duplicate tab option.
    BR,
    Durga Rao.

  • When trying to customise-organise the Firefox 17 does not allow the bookmarks toolbar to be placed above the tabs toolbar is there a solution other than reverti

    When trying to customize-organise the Firefox 17 does not allow the bookmarks toolbar to be placed above the tabs toolbar is there a solution other than reverting to a previous version of FF?

    # Type ''about:config'' in the address bar and press Enter.
    # Press the big button to bypass the warning.
    # In the search box, paste ''browser.tabs.onTop''
    # In the search results, double-click ''browser.tabs.onTop'' to set its value to '''false'''.
    Note: If you're using either Windows 7 or Vista with an Aero Windows theme, performing the above will make a large part of the Firefox window glassy. If you find this unpleasant, the simplest thing to do is to install a persona.
    * https://addons.mozilla.org/firefox/personas/solid

  • I have set up our school ipads to be supervised by Apple Configurator and am using VPP to buy apps.  I now find the supervised ipads do not allow the pupils to download photos or movies etc. Any suggestions would be great please.

    I have set up our school ipads to be supervised by Apple Configurator and am using VPP to buy apps. I did this initially as our school internet connection was stopping us from being able to update the IOS and our County was offering a managed system, Lightspeed, which took control of every device in school which proved very expensive.  I now find the supervised ipads do not allow the pupils to download photos or movies etc. As we frequently use the ipads as cameras this is causing us a problem. We have a school imac that I use to keep the devices updated with Apple Configurator (not connected to our network), and this doesn't seem to offer any solution to download them either.  I was told there was a setting in Apple Configurator to allow other computers to download from supervised devices, but I can't see it anywhere.  I am very new to this so any advice or help would be greatly appreciated please.

    I assume you are wanting to take the photos and movies off the iPads?
    Connect the iPad to a Apple computer. Open "Image Capture". Any photos or video can me imported to the desktop or other location on your computer.
    I had this same problem last year and as we have no wifi I asked lots of people at Apple what I could do - no one provided this answer (a little unbelievable!). If you have wifi using something like dropbox would be an easier solution.
    Hope this helps

  • Farm Remote App 2012 R : Your system administrator does not allow the use of default credentials to log on to Work Resources

    Hi
    Here is the situation:
    I have a Farm with 3 servers W2012R2 in a Domain
    Server1                           Server 2                                  
    Server3
    RDSession Host            RDSession Host                            
    RDSession Host
    Connection Broker        Connection Broker (Passive)
    RD Web Access
    2 DNS Alias : - poc.mydomain.local (Use for the RD Web Access and points to Server1
                        -poccb.mydomain.local (Use for the Connection Broker and points to Server1)
    I have setup the Connection broker in HA with Server2 as Passive Server : DNS Round Robin poccb.mydomain.local (Server1)
    The certificate Manager has generated 2 CA certificates :
    - 1 for the RD Web Acc (poc.mydomain.local
    -1 for Connection Broker SSO and for publishing
    I have created 1 Group Policy for these 3 servers and 1 GP for my client Windows 7 SP1.
    Server GPO :
    Computer/Administrative Templates/Windows Components/Remote Desktop Services/Remote Desktop Session Host/Security
    Always prompt for password upon connection=Disabled
    Require use of specific security layer for remote (RDP) connections : SSL (TLS 1.0)
    Set client connection encryption level : High Level
    Client GPO
    Computer/Administrative Templates/System/Credentials Delegation = Allow delegating default credentials (Concatenate OS defaults with input above)
    TERMSRV/POCCB.mydomain.local
    I use no Gateway and in my collection,I have activated SSL (Like in my Server GPO)
    I have now problem with SSO.
    Connection with remote desktop client with server name = poccb.mydomain.local
    Your system administrator does not allow you the use of default credentials to log on to the remote computer poccb.mydomain.local because its identity is not fully verified
    If in my client GPO I add the physical name of the 3 servers, it works :
    TERMSRV/Server1
    TERMSRV/Server2
    TERMSRV/Server3
    Open RDP Files with server name = poccb.mydomain.local
    if my connection broker connects me on Server1 , no problem
    But If I arrive on Server2 & Server 3=
    Your system administrator does not allow the use of default credentials to log on to Work Resources
    I have searched on internet. No result for " to log on to Work Resources"
    Any idea ? Thanks for your help

    Hi,
    Thank you for posting in Windows Server Forum.
    Firstly check that, your user is using domain\username to enter the credential in the dialog box.
    Now for a try, you can edit .rdp file with notepad and just place “enablecredsspsupport:i:0” line in it, save it an launch to check whether you are facing same issue.
    As you are using windows 7 then upgrade to RDP 8.1. Also as you have already enter the FQDN name of server under “Allow delegating default credentials”. For a try please enable and configure for all the remaining settings as follow and check the result.
    Start / Run / gpedit.msc / Computer Configuration / Administrative Templates / System / Credentials Delegation, and make sure you have the following four options enabled and configured:
    Allow Delegating Default Credentials with NTLM-only Server Authentication
    Allow Delegating Default Credentials
    Allow Delegating Saved Credentials
    Allow Delegating Saved Credentials with NTLM-only Server Authentication
    Finally, open a command prompt and use “gpupdate /force” command to apply the policy directly.
    More information:
    Remote desktop credentials did not work
    Hope it helps!
    Thanks.
    Dharmesh Solanki

  • I wanted a solution to the problem I was having on Win 7 Pro Service Pack 1 in that links on an open Adobe Acrobat file will not open in my Firefox Browser 33.0.2. The Error I receive is "Acrobat could not run the web browser.  Unknown Error. (123)"

    I want a solution to the problem I was having on Win 7 Pro Service Pack 1 in that links on an open Adobe Acrobat Pro 10.1.12  file will not open in my Firefox Browser 33.0.2. The Error I receive is "Acrobat could not run the web browser.  Unknown Error. (123)"

    Change browsers. See what happens.
    Be well...

  • My system needs internet explorer for a application I need to down load, however I need to down load the latest yahoo tool bar for internet explorer to work properly and firefox will not allow the down load of yahoo toolbar. How do I fix this?

    I have not used Internet explorer since downloading firefox and I need IE for a trading platform that I need to use. In order to get IE working I apparently need to down load the latest version of Yahoo toolbar, however when I try to down load the tool bar Firefox will not allow the down load of that file.

    Thank you so much, for once in my computer life I knew what the problem was, what caused it, why it was caused, what it did, what it made it do and most importantly how to fix it and to do it correctly and expeditiously. I can not Thank You all enough for all of the help! I also have Pogo mailed this to all on my friends list, where they have all learned as I have and have fixed theirs also. and the message is being spread. Thank You again, I just can not say it enough.

  • I can not open the Safari browser in the operating system ( os x Mavericks) due to load a program of site

    I can not open the Safari browser in the operating system ( os x Mavericks ) ?    
    due to load a program of site>!!!!
    please help me .
    thank you

    Try this.
    Force Quit .
    Press command + option + esc keys together at the same time. Wait.
    When Force Quit window appears, select  Safari if not already.
    Press Force Quit button at the bottom of the window.   Wait.
    Safari will quit.
    Relaunch Safari holding the shift key down.

  • I have Windows 8 pro on my computer .  I un-installed itunes on my computer to re-install itunes 7.1.1  Now the system will not allow the re-install.  Can anyone help?

    I have Windows 8 pro on my computer .  I un-installed itunes on my computer to re-install itunes 7.1.1  Now the system will not allow the re-install.  Can anyone help?

    I have an HP Officejet Pro 7580 similar to the 8600 you have and after upgrading to Mountain Lion it wouldn't work. HP support site said download updates for Mountain Lion from App Store not their site so I went to software update but there were NO UPDATES FOR 10.8.  Tried a million things and could not get printer to work.  So I restored back to Lion figuring at least printer worked then only now I can't get it to work with old settings either. I am sick to death of claims by Apple and peripheral manufacturers that everything is compatible all you have to do is get updates well in this case THERE ARE NONE TO BE GOT and I don't have time to **** about trying to find 'work arounds'.  There shouldnt be a need for work-arounds. Unless the updates are ready DONT release the new OS.  You shouldn't have to be an IT tech to make basic things like printing work.  I see also the HP 8600 is even sold by appstore so there is no reason why it shouldn't work with minimum fuss. 

  • I am trying to stream via ESPNWatch but I get a message saying I have a popup blocker that does not allow the streaming to happen. I unchecked the pop up blocker box in the Safari preferences to no avail. Any ideas?

    I am trying to stream via ESPNWatch but I get a message saying I have a popup blocker that does not allow the streaming to happen. I unchecked the pop up blocker box in the Safari preferences to no avail. Any ideas?

    Might be a Safari extension...
    From your Safari menu bar click Safari > Preferences then select the Extensions tab.
    If there are any extensions installed, turn that OFF, then quit and relaunch Safari to test.

  • Could not run the web browser

    I've installed Reader 7.0.9 in order to read ebooks. When I try to activate the mobile device, reader responds with "Acrobat could not run the web browser. Unknown error. (0)". Is there a plug-in missing or corrupted control somewhere. Any suggestions. This is XP SP2 (and SP3) on a Dell Precision.
    Any suggestions.

    Let me amend my comment. Reader 7 might have been tested with XP SP2,
    but with all the changes in the OS due to security changes, OS changes
    and browser changes, Reader 8.1.3 or Reader 9 would be a better match to
    your software.
    Mike

  • Filter recipients who are not in the Directory and smtp connectors for anothers mail systems organisations

    Hello,
    The cusomer have exchange 2003/2010 in the same organisation for the forest @domain1.fr (main organisation exchange). all users in the same forest use smtp address @domain1.fr
    This Exchange organisation is used as a rely for others branch. I mean that, they have multiples smtp connectors for another internal messaging organisation (postfix, exchange, exim....).
    When a external mail sent to @toto.fr (internal or accepted smtp domain), it sent to the main organisation exchange (@domain1.fr) to be relayed for @toto.fr smtp server.
    we want to filter the recipients in the main organisation exchange(only for @domain1.fr) by enable "Filter recipients who are not in the Directory" in global setting. we wonder if there is an impact for relying the mails to others accepted domain
    because the recipients doesn't exist in the forest @domain1.fr.
    is there a workaround ?
    Regards

    Hi,
    "Filter recipients who are not in the Directory".
    Do you mean the "Block messages sent to recipients that do not exist in the directory"?
    This will impact the whole Organisation.
    More details to see:
    http://technet.microsoft.com/en-us/library/aa995993(v=exchg.141).aspx
    Please correct me if there is any misunderstanding.
    Thanks
    Mavis
    Mavis Huang
    TechNet Community Support

  • FTP file adapter: file access permissions do not allow the specified action

    Hi,
    I have the File to JDBC scenario. The file is extracted in AL11 folder of the Sending (BW) system.
    The folder is FTP enabled and the Unix admin says he has given full authorization to both the folder and ftp user.
    But in the File CC I get the following error "Could not process due to error: com.sap.aii.adapter.file.ftp.FTPEx: 550 TSMSACAIX5350.tar.gz: The file access permissions do not allow the specified action."
    Can some one advice what is wrong. Im pretty much sure it has to be a problem with the UNIX permission. But the unix admin person says he has given a full permission.
    I need to know what permissions needs to be given??  Is there different permissions for application level and OS level??
    Pls advice
    Thanks
    Prasanna

    >
    Prasanna Shanmugasundaram wrote:
    > Hi,
    > I have the File to JDBC scenario. The file is extracted in AL11 folder of the Sending (BW) system.
    > The folder is FTP enabled and the Unix admin says he has given full authorization to both the folder and ftp user.
    > But in the File CC I get the following error "Could not process due to error: com.sap.aii.adapter.file.ftp.FTPEx: 550 TSMSACAIX5350.tar.gz: The file access permissions do not allow the specified action."
    >
    > Can some one advice what is wrong. Im pretty much sure it has to be a problem with the UNIX permission. But the unix admin person says he has given a full permission.
    > I need to know what permissions needs to be given??  Is there different permissions for application level and OS level??
    >
    > Pls advice
    >
    > Thanks
    > Prasanna
    In CC you set ON the delete mode, after processing file? Maybe, the file have read only permission....

Maybe you are looking for