Eclipse Community Forums: Java Development Tools (JDT)

Home » Language IDEs » Java Development Tools (JDT) » Securing Eclipse help plug-in(Adding web.xml security-constraint did not resolve the issue)

Securing Eclipse help plug-in [message #1268471]

Mon, 10 March 2014 10:43

Eclipse User

The security app scan tools found an unsecured file in our help plug-in. No log in was required to view a file.

The file name was:

https://<server-name>:port-number/help/tocfragment/

I tried adding a WEB-INF/web.xml file to the help plug-in with security-constraint, login-config, and security-fole definitions in the web.xml. No change. The link can still be accessed.

How can the security be specified for the help plug-in?

Previous Topic:	workspace on network drive
Next Topic:	Eclipse not recognizing Java

Goto Forum:

-=] Back to Top [=-

Current Time: Fri Apr 18 01:05:05 EDT 2025

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter