Skip to main content

Problem:

  • Product Name: AppServer
  • Product Version: 5.x, 6.x
  • Platform/OS Version: ALL

When loading a WAR or a hosted exploded WAR, BES supposes to load class files in "/WEB-IINF/lib/*.*".
However, it loads the jar files which are not in /WEB-NF/lib.

For example, when I define as a home directory of hosted module.
I expect that BES just load the “deployed1”.jar and “deployed2”.jar but it also loads the “3rdparty classes1”.jar and “3rdpartyclasses2.zip”.

/”3rdparty/classes1”.jar
/”3rdparty/classes2”.zip
/a.jsp
/b.jsp
/WEB-INF/lib/”deployed1”.jar
/WEB-INF/lib/”deployed2”.jar

 
Is there a way to prevent BES loading the classes outside of /WEB-INF/lib folder?

Resolution:

You may use a property "restrict.war.libraries.to.webinf.lib" for the purpose though it is undocumented & unsupported.

To prevent BES loading the classes outside of /WEB-INF/lib, add the property as

vmprop restrict.war.libraries.to.webinf.lib=true

in <install_dir>/bin/partition.config if 5.x,

in <install_dir>/var/domains/base/configurations/<configuration_name>/mos/<partition_name>/adm/properties/partition_server.config if 6.x.


#WAR
#VisiBroker
#AppServer
#Security