| 1 | # Licensed to the Apache Software Foundation (ASF) under one or more
|
|---|
| 2 | # contributor license agreements. See the NOTICE file distributed with
|
|---|
| 3 | # this work for additional information regarding copyright ownership.
|
|---|
| 4 | # The ASF licenses this file to You under the Apache License, Version 2.0
|
|---|
| 5 | # (the "License"); you may not use this file except in compliance with
|
|---|
| 6 | # the License. You may obtain a copy of the License at
|
|---|
| 7 | #
|
|---|
| 8 | # http://www.apache.org/licenses/LICENSE-2.0
|
|---|
| 9 | #
|
|---|
| 10 | # Unless required by applicable law or agreed to in writing, software
|
|---|
| 11 | # distributed under the License is distributed on an "AS IS" BASIS,
|
|---|
| 12 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|---|
| 13 | # See the License for the specific language governing permissions and
|
|---|
| 14 | # limitations under the License.
|
|---|
| 15 |
|
|---|
| 16 | #
|
|---|
| 17 | # List of comma-separated packages that start with or equal this string
|
|---|
| 18 | # will cause a security exception to be thrown when
|
|---|
| 19 | # passed to checkPackageAccess unless the
|
|---|
| 20 | # corresponding RuntimePermission ("accessClassInPackage."+package) has
|
|---|
| 21 | # been granted.
|
|---|
| 22 | package.access=sun.,org.apache.catalina.,org.apache.coyote.,org.apache.jasper.,org.apache.tomcat.
|
|---|
| 23 | #
|
|---|
| 24 | # List of comma-separated packages that start with or equal this string
|
|---|
| 25 | # will cause a security exception to be thrown when
|
|---|
| 26 | # passed to checkPackageDefinition unless the
|
|---|
| 27 | # corresponding RuntimePermission ("defineClassInPackage."+package) has
|
|---|
| 28 | # been granted.
|
|---|
| 29 | #
|
|---|
| 30 | # by default, no packages are restricted for definition, and none of
|
|---|
| 31 | # the class loaders supplied with the JDK call checkPackageDefinition.
|
|---|
| 32 | #
|
|---|
| 33 | package.definition=sun.,java.,org.apache.catalina.,org.apache.coyote.,\
|
|---|
| 34 | org.apache.jasper.,org.apache.naming.,org.apache.tomcat.
|
|---|
| 35 |
|
|---|
| 36 | #
|
|---|
| 37 | #
|
|---|
| 38 | # List of comma-separated paths defining the contents of the "common"
|
|---|
| 39 | # classloader. Prefixes should be used to define what is the repository type.
|
|---|
| 40 | # Path may be relative to the CATALINA_HOME or CATALINA_BASE path or absolute.
|
|---|
| 41 | # If left as blank,the JVM system loader will be used as Catalina's "common"
|
|---|
| 42 | # loader.
|
|---|
| 43 | # Examples:
|
|---|
| 44 | # "foo": Add this folder as a class repository
|
|---|
| 45 | # "foo/*.jar": Add all the JARs of the specified folder as class
|
|---|
| 46 | # repositories
|
|---|
| 47 | # "foo/bar.jar": Add bar.jar as a class repository
|
|---|
| 48 | #
|
|---|
| 49 | # Note: Values are enclosed in double quotes ("...") in case either the
|
|---|
| 50 | # ${catalina.base} path or the ${catalina.home} path contains a comma.
|
|---|
| 51 | # Because double quotes are used for quoting, the double quote character
|
|---|
| 52 | # may not appear in a path.
|
|---|
| 53 | common.loader="${catalina.base}/lib","${catalina.base}/lib/*.jar","${catalina.home}/lib","${catalina.home}/lib/*.jar"
|
|---|
| 54 |
|
|---|
| 55 | #
|
|---|
| 56 | # List of comma-separated paths defining the contents of the "server"
|
|---|
| 57 | # classloader. Prefixes should be used to define what is the repository type.
|
|---|
| 58 | # Path may be relative to the CATALINA_HOME or CATALINA_BASE path or absolute.
|
|---|
| 59 | # If left as blank, the "common" loader will be used as Catalina's "server"
|
|---|
| 60 | # loader.
|
|---|
| 61 | # Examples:
|
|---|
| 62 | # "foo": Add this folder as a class repository
|
|---|
| 63 | # "foo/*.jar": Add all the JARs of the specified folder as class
|
|---|
| 64 | # repositories
|
|---|
| 65 | # "foo/bar.jar": Add bar.jar as a class repository
|
|---|
| 66 | #
|
|---|
| 67 | # Note: Values may be enclosed in double quotes ("...") in case either the
|
|---|
| 68 | # ${catalina.base} path or the ${catalina.home} path contains a comma.
|
|---|
| 69 | # Because double quotes are used for quoting, the double quote character
|
|---|
| 70 | # may not appear in a path.
|
|---|
| 71 | server.loader=
|
|---|
| 72 |
|
|---|
| 73 | #
|
|---|
| 74 | # List of comma-separated paths defining the contents of the "shared"
|
|---|
| 75 | # classloader. Prefixes should be used to define what is the repository type.
|
|---|
| 76 | # Path may be relative to the CATALINA_BASE path or absolute. If left as blank,
|
|---|
| 77 | # the "common" loader will be used as Catalina's "shared" loader.
|
|---|
| 78 | # Examples:
|
|---|
| 79 | # "foo": Add this folder as a class repository
|
|---|
| 80 | # "foo/*.jar": Add all the JARs of the specified folder as class
|
|---|
| 81 | # repositories
|
|---|
| 82 | # "foo/bar.jar": Add bar.jar as a class repository
|
|---|
| 83 | # Please note that for single jars, e.g. bar.jar, you need the URL form
|
|---|
| 84 | # starting with file:.
|
|---|
| 85 | #
|
|---|
| 86 | # Note: Values may be enclosed in double quotes ("...") in case either the
|
|---|
| 87 | # ${catalina.base} path or the ${catalina.home} path contains a comma.
|
|---|
| 88 | # Because double quotes are used for quoting, the double quote character
|
|---|
| 89 | # may not appear in a path.
|
|---|
| 90 | shared.loader=
|
|---|
| 91 |
|
|---|
| 92 | # Default list of JAR files that should not be scanned using the JarScanner
|
|---|
| 93 | # functionality. This is typically used to scan JARs for configuration
|
|---|
| 94 | # information. JARs that do not contain such information may be excluded from
|
|---|
| 95 | # the scan to speed up the scanning process. This is the default list. JARs on
|
|---|
| 96 | # this list are excluded from all scans. The list must be a comma separated list
|
|---|
| 97 | # of JAR file names.
|
|---|
| 98 | # The list of JARs to skip may be over-ridden at a Context level for individual
|
|---|
| 99 | # scan types by configuring a JarScanner with a nested JarScanFilter.
|
|---|
| 100 | # The JARs listed below include:
|
|---|
| 101 | # - Tomcat Bootstrap JARs
|
|---|
| 102 | # - Tomcat API JARs
|
|---|
| 103 | # - Catalina JARs
|
|---|
| 104 | # - Jasper JARs
|
|---|
| 105 | # - Tomcat JARs
|
|---|
| 106 | # - Common non-Tomcat JARs
|
|---|
| 107 | # - Test JARs (JUnit, Cobertura and dependencies)
|
|---|
| 108 | tomcat.util.scan.StandardJarScanFilter.jarsToSkip=\
|
|---|
| 109 | annotations-api.jar,\
|
|---|
| 110 | ant-junit*.jar,\
|
|---|
| 111 | ant-launcher*.jar,\
|
|---|
| 112 | ant*.jar,\
|
|---|
| 113 | asm-*.jar,\
|
|---|
| 114 | aspectj*.jar,\
|
|---|
| 115 | bcel*.jar,\
|
|---|
| 116 | biz.aQute.bnd*.jar,\
|
|---|
| 117 | bootstrap.jar,\
|
|---|
| 118 | catalina-ant.jar,\
|
|---|
| 119 | catalina-ha.jar,\
|
|---|
| 120 | catalina-ssi.jar,\
|
|---|
| 121 | catalina-storeconfig.jar,\
|
|---|
| 122 | catalina-tribes.jar,\
|
|---|
| 123 | catalina.jar,\
|
|---|
| 124 | cglib-*.jar,\
|
|---|
| 125 | cobertura-*.jar,\
|
|---|
| 126 | commons-beanutils*.jar,\
|
|---|
| 127 | commons-codec*.jar,\
|
|---|
| 128 | commons-collections*.jar,\
|
|---|
| 129 | commons-compress*.jar,\
|
|---|
| 130 | commons-daemon.jar,\
|
|---|
| 131 | commons-dbcp*.jar,\
|
|---|
| 132 | commons-digester*.jar,\
|
|---|
| 133 | commons-fileupload*.jar,\
|
|---|
| 134 | commons-httpclient*.jar,\
|
|---|
| 135 | commons-io*.jar,\
|
|---|
| 136 | commons-lang*.jar,\
|
|---|
| 137 | commons-logging*.jar,\
|
|---|
| 138 | commons-math*.jar,\
|
|---|
| 139 | commons-pool*.jar,\
|
|---|
| 140 | derby-*.jar,\
|
|---|
| 141 | dom4j-*.jar,\
|
|---|
| 142 | easymock-*.jar,\
|
|---|
| 143 | ecj-*.jar,\
|
|---|
| 144 | el-api.jar,\
|
|---|
| 145 | geronimo-spec-jaxrpc*.jar,\
|
|---|
| 146 | h2*.jar,\
|
|---|
| 147 | ha-api-*.jar,\
|
|---|
| 148 | hamcrest-*.jar,\
|
|---|
| 149 | hibernate*.jar,\
|
|---|
| 150 | httpclient*.jar,\
|
|---|
| 151 | icu4j-*.jar,\
|
|---|
| 152 | jasper-el.jar,\
|
|---|
| 153 | jasper.jar,\
|
|---|
| 154 | jaspic-api.jar,\
|
|---|
| 155 | jaxb-*.jar,\
|
|---|
| 156 | jaxen-*.jar,\
|
|---|
| 157 | jaxws-rt-*.jar,\
|
|---|
| 158 | jdom-*.jar,\
|
|---|
| 159 | jetty-*.jar,\
|
|---|
| 160 | jmx-tools.jar,\
|
|---|
| 161 | jmx.jar,\
|
|---|
| 162 | jsp-api.jar,\
|
|---|
| 163 | jstl.jar,\
|
|---|
| 164 | jta*.jar,\
|
|---|
| 165 | junit-*.jar,\
|
|---|
| 166 | junit.jar,\
|
|---|
| 167 | log4j*.jar,\
|
|---|
| 168 | mail*.jar,\
|
|---|
| 169 | objenesis-*.jar,\
|
|---|
| 170 | oraclepki.jar,\
|
|---|
| 171 | org.hamcrest.core_*.jar,\
|
|---|
| 172 | org.junit_*.jar,\
|
|---|
| 173 | oro-*.jar,\
|
|---|
| 174 | servlet-api-*.jar,\
|
|---|
| 175 | servlet-api.jar,\
|
|---|
| 176 | slf4j*.jar,\
|
|---|
| 177 | taglibs-standard-spec-*.jar,\
|
|---|
| 178 | tagsoup-*.jar,\
|
|---|
| 179 | tomcat-api.jar,\
|
|---|
| 180 | tomcat-coyote.jar,\
|
|---|
| 181 | tomcat-coyote-ffm.jar,\
|
|---|
| 182 | tomcat-dbcp.jar,\
|
|---|
| 183 | tomcat-i18n-*.jar,\
|
|---|
| 184 | tomcat-jdbc.jar,\
|
|---|
| 185 | tomcat-jni.jar,\
|
|---|
| 186 | tomcat-juli-adapters.jar,\
|
|---|
| 187 | tomcat-juli.jar,\
|
|---|
| 188 | tomcat-util-scan.jar,\
|
|---|
| 189 | tomcat-util.jar,\
|
|---|
| 190 | tomcat-websocket.jar,\
|
|---|
| 191 | tools.jar,\
|
|---|
| 192 | unboundid-ldapsdk-*.jar,\
|
|---|
| 193 | websocket-api.jar,\
|
|---|
| 194 | wsdl4j*.jar,\
|
|---|
| 195 | xercesImpl.jar,\
|
|---|
| 196 | xml-apis.jar,\
|
|---|
| 197 | xmlParserAPIs-*.jar,\
|
|---|
| 198 | xmlParserAPIs.jar,\
|
|---|
| 199 | xom-*.jar
|
|---|
| 200 |
|
|---|
| 201 | # Default list of JAR files that should be scanned that overrides the default
|
|---|
| 202 | # jarsToSkip list above. This is typically used to include a specific JAR that
|
|---|
| 203 | # has been excluded by a broad file name pattern in the jarsToSkip list.
|
|---|
| 204 | # The list of JARs to scan may be over-ridden at a Context level for individual
|
|---|
| 205 | # scan types by configuring a JarScanner with a nested JarScanFilter.
|
|---|
| 206 | tomcat.util.scan.StandardJarScanFilter.jarsToScan=\
|
|---|
| 207 | log4j-taglib*.jar,\
|
|---|
| 208 | log4j-web*.jar,\
|
|---|
| 209 | log4javascript*.jar,\
|
|---|
| 210 | slf4j-taglib*.jar
|
|---|
| 211 |
|
|---|
| 212 | # String cache configuration.
|
|---|
| 213 | tomcat.util.buf.StringCache.byte.enabled=true
|
|---|
| 214 | #tomcat.util.buf.StringCache.char.enabled=true
|
|---|
| 215 | #tomcat.util.buf.StringCache.trainThreshold=500000
|
|---|
| 216 | #tomcat.util.buf.StringCache.cacheSize=5000
|
|---|
| 217 |
|
|---|
| 218 | # Disable use of some privilege blocks Tomcat doesn't need since calls to the
|
|---|
| 219 | # code in question are always already inside a privilege block
|
|---|
| 220 | org.apache.el.GET_CLASSLOADER_USE_PRIVILEGED=false
|
|---|