Tomcat security constraint question

Question

Hi all,
we're using the following security constring for securing our servletts. Everything works fine so far.
<security-constraint>
<web-resource-collection>
<web-resource-name>Test</web-resource-name>
<url-pattern>/*</url-pattern>
</web-resource-collection>
</security-constraint>
Now the question: We've implemented some kind of password reminder which allows you to retrieve a new password, this servlett should be accessible by anybody.
Do we have to list all the url-mappings except the one for the password reminder or is there a special tag to exclude an url-pattern from the wildcard-rule which we haven't yet? Any hints would be appreciated...
Regards, Florian

Answer 1

Using: Tomcat 5.5.20 on Windows Server 2003
Couple Questions:
1. How do I prevent users from entering a double
quote in the INPUT field on the server side?use javascript
Also, is
it possible to replace the double quote with single
quote on the server side? If yes, How? I don't want
to use JavaScript because it can be disabled.yes,
yourVarString.replaceAll("\"","\'");
2. Where is the best place to ack Tomcat questions?http://tomcat.apache.org/findhelp.html
I
had some question on security-constraint. I have a
folder that has sercurity-constraint on it, so when
that folder is accessed tomcat asks for credentials.
Once user provides proper Username and Password, it
grants them the access. Now I want to know once the
access is granted, how come it doesn't display
index.jsp form that folder, It displays an image. I
don't understand why?
Please help....i have encountered that also on tomcat 3 intalled on linux machine.. the account that was being used to start the tomcat is root.. then the resolution was the owner account of the tomcat starts the server and it worked! hope that give you an idea