search

viviotech / lucee-installer

BitRock Installer XML config and files for the Lucee installers
http://lucee.viviotech.net/
9 stars 2 forks source link

Disable BlazeDS / Flash Remoting by default #73

Closed pfreitag closed 8 years ago

pfreitag commented 9 years ago

In the current state it looks like the Lucee installer has disabled (commented out) the Flash Remoting servlets and servlet-mappings for Tomcat 8 web.xml but the Tomcat 7 web.xml still has it enabled. Not sure if the tomcat 7 is used anymore (is there an option to pick tomcat version?) but if so, then consider disabling it by default (due to security issues and the fact that not many people use it anymore). It should also improve server startup times.

More info: https://www.petefreitag.com/item/837.cfm and https://luceeserver.atlassian.net/browse/LD-72

utdream commented 9 years ago

Thanks Pete. There's no option to pick the Tomcat version and Tomcat 7 will no longer be included now that we're on Tomcat 8 (too much work!). Thanks for letting me know. I'll try to help spread the word.

utdream commented 8 years ago

Removing tomcat 7 files from repo for Lucee 5