Tomcat preven file downloads

In such case the absolute-ordering option alone does not prevent scanning for annotations, but the list of JARs to be scanned will be empty, and thus the scanning will complete quickly. Remove any JAR files you do not need. When searching for classes every JAR file needs to be examined to find the needed class. If the jar file is not there - there is nothing to search.

All those are provided by the container Tomcat and should never be present in the web application. See also a stackoverflow page. In Tomcat 7 JAR files can be excluded from scanning by listing their names or name patterns in a system property. In Tomcat 8 there are several options available. There exists an attribute on Context element, containerSciFilter. For WebSocket support the name is org. WsSci , for JSP support the name is org.

Generally, it is the first SCI scan that has the biggest performance impact. The impact of additional scans is minimal. References: Bug , Tomcat 8 Context documentation. Depending on your JRE it can cause delays during startup if entropy source that is used to initialize SecureRandom is short of entropy. You will see warning in the logs when this happens, e.

There is a way to configure JRE to use a non-blocking entropy source by setting the following system property: -Djava. They are needed to work around known Oracle JRE bug Active Oldest Votes. Improve this answer. Beep beep Beep beep 1, 2 2 gold badges 18 18 silver badges 33 33 bronze badges. Joseph Kern Joseph Kern 9, 3 3 gold badges 30 30 silver badges 55 55 bronze badges. I just want to know if there is a better fix for it out there. If I don't get replies, I will post the fix.

Thanks again. John Meagher John Meagher 2 2 silver badges 3 3 bronze badges. Horace Horace. You can block the directory in public access through server. Linux Sridharan Linux Sridharan 1 1 1 bronze badge. Sign up or log in Sign up using Google. Sign up using Facebook. Sign up using Email and Password. Post as a guest Name. Email Required, but never shown. The Overflow Blog. Podcast Who is building clouds for the independent developer?

Exploding turkeys and how not to thaw your frozen bird: Top turkey questions Featured on Meta. Now live: A fully responsive profile. Create a free Team What is Teams? Collectives on Stack Overflow. Learn more. Setting up a file for download on a tomcat server. Ask Question. Asked 10 years, 3 months ago. Active 10 years, 3 months ago. Viewed 8k times. I'm generating a.

I have it saved to a tmp directory, as follows: docx. I have tried the following: out. Dara Java. Dara Java Dara Java 1, 1 1 gold badge 15 15 silver badges 31 31 bronze badges.

Duplicate: stackoverflow.