are you using Tomcat 5.0 (JBoss 4.0.1) or 5.5 (JBoss 4.0.2) ?



to disable directory listings you should add this to your web.xml:





        <init-param>

            <param-name>listings</param-name>

            <param-value>false</param-value>

        </init-param>





this is set by default in the latest versions, for security related features I recommend using the latest bpm4struts version, upgrade your AndroMDA to 3.1-RC1-SNAPSHOT if you can



many improvements concerning security have been implemented: error pages, JSP security, etc...
--
Wouter Zoons - wouter@andr...

http://www.andromda.org/
_________________________________________________________
Reply to the post : http://galaxy.andromda.org/forum/viewtopic.php?p=3937#3937
Posting to http://forum.andromda.org/ is preferred over posting to the mailing list!


-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
Andromda-user mailing list
Andromda-user@list...
https://lists.sourceforge.net/lists/listinfo/andromda-user