#8 Remove config.inc.jsp access from the web

[Chan Hong Guan]

Remove config.inc.jsp access from the web

[Nobody/Anonymous]

Logged In: NO

An evil hot-fix for this is to add this to your web.xml within the web-app tags:

<servlet>
<servlet-name>Index</servlet-name>
<jsp-file>index.jsp</jsp-file>
<load-on-startup>1</load-on-startup>
</servlet>

<servlet-mapping>
<servlet-name>Index</servlet-name>
<url-pattern>/config.inc.jsp</url-pattern>
</servlet-mapping>

It wil redirect all calls to config.inc.jsp to index.jsp. Doesn't make sense servlet wise, but it's easier than writing a filter for it.