This week's book giveaway is in the OCAJP 8 forum. We're giving away four copies of OCA Java SE 8 Programmer I Study Guide and have Edward Finegan & Robert Liguori on-line! See this thread for details.
I don't know about other containers, but any security restrictions on servlets and JSP in Tomcat are those imposed by the administrator of the system through Java's "fine grained" SecurityManager policy definition capabilities. I just went through this when getting a servlet to talk to a JavaSpaces server. If you start Tomcat with the -security command line parameter, a SecurityManager is created using the ../conf/catalina.policy file. There is nothing unique to Tomcat here - just plain Java security. If you don't specify -security, no SecurityManger is created and code can do anything it wants. Bill
Joined: Dec 30, 2003
Thank you for your time Bill [ March 08, 2004: Message edited by: Tonny Tssagovic ]