Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable BlazeDS / Flash Remoting by default #73

Closed
pfreitag opened this issue Sep 3, 2015 · 2 comments
Closed

Disable BlazeDS / Flash Remoting by default #73

pfreitag opened this issue Sep 3, 2015 · 2 comments

Comments

@pfreitag
Copy link

pfreitag commented Sep 3, 2015

In the current state it looks like the Lucee installer has disabled (commented out) the Flash Remoting servlets and servlet-mappings for Tomcat 8 web.xml but the Tomcat 7 web.xml still has it enabled. Not sure if the tomcat 7 is used anymore (is there an option to pick tomcat version?) but if so, then consider disabling it by default (due to security issues and the fact that not many people use it anymore). It should also improve server startup times.

More info: https://www.petefreitag.com/item/837.cfm and https://luceeserver.atlassian.net/browse/LD-72

@utdream
Copy link
Contributor

utdream commented Sep 3, 2015

Thanks Pete. There's no option to pick the Tomcat version and Tomcat 7 will no longer be included now that we're on Tomcat 8 (too much work!). Thanks for letting me know. I'll try to help spread the word.

@utdream
Copy link
Contributor

utdream commented Feb 16, 2016

Removing tomcat 7 files from repo for Lucee 5

@utdream utdream closed this as completed Feb 16, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants