Web app security

Greenhorn

Posts: 28

posted 16 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Hi all,
I have a doubt regarding <http-method> element inside <security-constraint>.

What will happen if there is no <http-method> element inside this ?

All the methods are constrained/restricted or alllowed ?

when i checked the errata for HFSJ, it was given that all methods are allowed by a client to access a resource when <http-method> is not present.

Vishnu Prakash

Ranch Hand

Posts: 1026

posted 16 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Check this
[ January 04, 2006: Message edited by: Vishnu Prakash ]

Servlet Spec 2.4/ Jsp Spec 2.0/ JSTL Spec 1.1 - JSTL Tag Documentation

Villains always have antidotes. They're funny that way. Here's an antidote disguised as a tiny ad:

Free, earth friendly heat - from the CodeRanch trailboss

https://www.kickstarter.com/projects/paulwheaton/free-heat