Bug 57245 - "allowLinking" attribute on Context element is not evaluated
Summary: "allowLinking" attribute on Context element is not evaluated
Status: RESOLVED FIXED
Alias: None
Product: Tomcat 8
Classification: Unclassified
Component: Documentation (show other bugs)
Version: 8.0.15
Hardware: PC Linux
: P2 normal (vote)
Target Milestone: ----
Assignee: Tomcat Developers Mailing List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-11-21 14:54 UTC by Torsten Krah
Modified: 2014-11-24 11:33 UTC (History)
0 users


Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Torsten Krah 2014-11-21 14:54:37 UTC 
Docs from here 

http://tomcat.apache.org/tomcat-8.0-doc/security-howto.html#Context 

still known the allowLinking attribute (known from tomcat6, 7 where it works).
Using the same on a Context element in tomcat 8 results in:

WARNUNG: [SetContextPropertiesRule]{Context} Setting property 'allowLinking' to 'true' did not find a matching property.

And the doc on:

http://tomcat.apache.org/tomcat-8.0-doc/config/context.html

doesn't know this anymore.

So somehow this feature is missing now in Tomcat 8 now - can you please add it back?

regards

Torsten
Comment 1 Konstantin Kolinko 2014-11-21 15:02:42 UTC 
It is on Resources element now. See
http://tomcat.apache.org/migration-8.html#Web_application_resources

The security-howto.html in Tomcat 8 needs to be corrected.
Comment 2 Torsten Krah 2014-11-21 15:06:48 UTC 
Looking at the resource documentation its not clear to me, how i can get the "old" behavior for the docBase allowLinking one.
Can a upgrade example be added there too?
Comment 3 Konstantin Kolinko 2014-11-21 15:20:24 UTC 
> Can a upgrade example be added there too?

Done (r1640935)
Comment 4 Torsten Krah 2014-11-21 15:21:38 UTC 
Thanks.
Comment 5 Mark Thomas 2014-11-24 11:33:04 UTC 
Docs updated in trunk and 8.0.x and will be included in 8.0.16 onwards.