Problem:
- Product Name: AppServer
- Product Version: 5.x, 6.x
- Platform/OS Version: ALL
When loading a WAR or a hosted exploded WAR, BES supposes to load class files in "/WEB-IINF/lib/*.*".
However, it loads the jar files which are not in /WEB-NF/lib.
For example, when I define as a home directory of hosted module.
I expect that BES just load the “deployed1”.jar and “deployed2”.jar but it also loads the “3rdparty classes1”.jar and “3rdpartyclasses2.zip”.
/”3rdparty/classes1”.jar
/”3rdparty/classes2”.zip
/a.jsp
/b.jsp
/WEB-INF/lib/”deployed1”.jar
/WEB-INF/lib/”deployed2”.jar
Is there a way to prevent BES loading the classes outside of /WEB-INF/lib folder?
Resolution:
You may use a property "restrict.war.libraries.to.webinf.lib" for the purpose though it is undocumented & unsupported.
To prevent BES loading the classes outside of /WEB-INF/lib, add the property as
vmprop restrict.war.libraries.to.webinf.lib=true
in <install_dir>/bin/partition.config if 5.x,
in <install_dir>/var/domains/base/configurations/<configuration_name>/mos/<partition_name>/adm/properties/partition_server.config if 6.x.
#WAR
#VisiBroker
#AppServer
#Security