Home/ Questions/Q 7045597
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-28T02:32:59+00:00

i’m thinking to extend my JSP-based WEB site with the option to customize it

  • 0

i’m thinking to extend my JSP-based WEB site with the option to customize it with dynamically user-loaded 3rd party tag libs. The question I have is what is the possible way to secure it within my WEB server, i.e. do not allow it do something like taking my passwords from local file system and send it somewhere to internet.

Is there some more-or-less standard approach for this?

I’m aware this can be done by customer SecurityManager (provided I have implemented my WEB server from scratch :)), but i have no idea what would be the way to plug in security manager into existing WEB server engine – for example Tomcat.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Tomcat supports use of a security manager. Just activate it on startup, using the -security command line option, and define your security policy in catalina.policy.

    • 0