| # Licensed to the Apache Software Foundation (ASF) under one or more |
| # contributor license agreements. See the NOTICE file distributed with |
| # this work for additional information regarding copyright ownership. |
| # The ASF licenses this file to You under the Apache License, Version 2.0 |
| # (the "License"); you may not use this file except in compliance with |
| # the License. You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, software |
| # distributed under the License is distributed on an "AS IS" BASIS, |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| # See the License for the specific language governing permissions and |
| # limitations under the License. |
| |
| # |
| # List of comma-separated packages that start with or equal this string |
| # will cause a security exception to be thrown when |
| # passed to checkPackageAccess unless the |
| # corresponding RuntimePermission ("accessClassInPackage."+package) has |
| # been granted. |
| package.access=sun.,org.apache.catalina.,org.apache.coyote.,org.apache.jasper.,\ |
| org.apache.naming.resources.,org.apache.tomcat. |
| # |
| # List of comma-separated packages that start with or equal this string |
| # will cause a security exception to be thrown when |
| # passed to checkPackageDefinition unless the |
| # corresponding RuntimePermission ("defineClassInPackage."+package) has |
| # been granted. |
| # |
| # by default, no packages are restricted for definition, and none of |
| # the class loaders supplied with the JDK call checkPackageDefinition. |
| # |
| package.definition=sun.,java.,org.apache.catalina.,org.apache.coyote.,\ |
| org.apache.jasper.,org.apache.naming.,org.apache.tomcat. |
| |
| # |
| # |
| # List of comma-separated paths defining the contents of the "common" |
| # classloader. Prefixes should be used to define what is the repository type. |
| # Path may be relative to the CATALINA_HOME or CATALINA_BASE path or absolute. |
| # If left as blank,the JVM system loader will be used as Catalina's "common" |
| # loader. |
| # Examples: |
| # "foo": Add this folder as a class repository |
| # "foo/*.jar": Add all the JARs of the specified folder as class |
| # repositories |
| # "foo/bar.jar": Add bar.jar as a class repository |
| common.loader=${catalina.base}/lib,${catalina.base}/lib/*.jar,${catalina.home}/lib,${catalina.home}/lib/*.jar |
| |
| # |
| # List of comma-separated paths defining the contents of the "server" |
| # classloader. Prefixes should be used to define what is the repository type. |
| # Path may be relative to the CATALINA_HOME or CATALINA_BASE path or absolute. |
| # If left as blank, the "common" loader will be used as Catalina's "server" |
| # loader. |
| # Examples: |
| # "foo": Add this folder as a class repository |
| # "foo/*.jar": Add all the JARs of the specified folder as class |
| # repositories |
| # "foo/bar.jar": Add bar.jar as a class repository |
| server.loader= |
| |
| # |
| # List of comma-separated paths defining the contents of the "shared" |
| # classloader. Prefixes should be used to define what is the repository type. |
| # Path may be relative to the CATALINA_BASE path or absolute. If left as blank, |
| # the "common" loader will be used as Catalina's "shared" loader. |
| # Examples: |
| # "foo": Add this folder as a class repository |
| # "foo/*.jar": Add all the JARs of the specified folder as class |
| # repositories |
| # "foo/bar.jar": Add bar.jar as a class repository |
| # Please note that for single jars, e.g. bar.jar, you need the URL form |
| # starting with file:. |
| shared.loader= |
| |
| # List of JAR files that should not be scanned using the JarScanner |
| # functionality. This is typically used to scan JARs for configuration |
| # information. JARs that do not contain such information may be excluded from |
| # the scan to speed up the scanning process. This is the default list. JARs on |
| # this list are excluded from all scans. Scan specific lists (to exclude JARs |
| # from individual scans) follow this. The list must be a comma separated list of |
| # JAR file names. |
| # The JARs listed below include: |
| # - Tomcat Bootstrap JARs |
| # - Tomcat API JARs |
| # - Catalina JARs |
| # - Jasper JARs |
| # - Tomcat JARs |
| # - Common non-Tomcat JARs |
| # - Test JARs (JUnit, Cobertura and dependencies) |
| tomcat.util.scan.DefaultJarScanner.jarsToSkip=\ |
| annotations-api.jar,\ |
| ant-junit*.jar,\ |
| ant-launcher.jar,\ |
| ant.jar,\ |
| asm-*.jar,\ |
| aspectj*.jar,\ |
| bootstrap.jar,\ |
| catalina-ant.jar,\ |
| catalina-ha.jar,\ |
| catalina-jmx-remote.jar,\ |
| catalina-tribes.jar,\ |
| catalina-ws.jar,\ |
| catalina.jar,\ |
| cobertura-*.jar,\ |
| commons-beanutils*.jar,\ |
| commons-codec*.jar,\ |
| commons-collections*.jar,\ |
| commons-daemon.jar,\ |
| commons-dbcp*.jar,\ |
| commons-digester*.jar,\ |
| commons-fileupload*.jar,\ |
| commons-httpclient*.jar,\ |
| commons-io*.jar,\ |
| commons-lang*.jar,\ |
| commons-logging*.jar,\ |
| commons-math*.jar,\ |
| commons-pool*.jar,\ |
| dom4j-*.jar,\ |
| ecj-*.jar,\ |
| el-api.jar,\ |
| geronimo-spec-jaxrpc*.jar,\ |
| h2*.jar,\ |
| hamcrest-*.jar,\ |
| hibernate*.jar,\ |
| httpclient*.jar,\ |
| icu4j-*.jar,\ |
| jasper-el.jar,\ |
| jasper.jar,\ |
| jaxb-*.jar,\ |
| jaxen-*.jar,\ |
| jdom-*.jar,\ |
| jetty-*.jar,\ |
| jmx-tools.jar,\ |
| jmx.jar,\ |
| jsp-api.jar,\ |
| jstl.jar,\ |
| jta*.jar,\ |
| junit-*.jar,\ |
| junit.jar,\ |
| log4j-1*.jar,\ |
| log4j*.jar,\ |
| mail*.jar,\ |
| org.hamcrest.*.jar,\ |
| oraclepki.jar,\ |
| oro-*.jar,\ |
| servlet-api-*.jar,\ |
| servlet-api.jar,\ |
| slf4j*.jar,\ |
| taglibs-standard-spec-*.jar,\ |
| tagsoup-*.jar,\ |
| tomcat-api.jar,\ |
| tomcat-coyote.jar,\ |
| tomcat-dbcp.jar,\ |
| tomcat-i18n-*.jar,\ |
| tomcat-jdbc.jar,\ |
| tomcat-jni.jar,\ |
| tomcat-juli-adapters.jar,\ |
| tomcat-juli.jar,\ |
| tomcat-spdy.jar,\ |
| tomcat-util.jar,\ |
| tools.jar,\ |
| websocket-api.jar,\ |
| wsdl4j*.jar,\ |
| xercesImpl.jar,\ |
| xml-apis.jar,\ |
| xmlParserAPIs-*.jar,\ |
| xmlParserAPIs.jar,\ |
| xom-*.jar |
| |
| # Additional JARs (over and above the default JARs listed above) to skip when |
| # scanning for Servlet 3.0 pluggability features. These features include web |
| # fragments, annotations, SCIs and classes that match @HandlesTypes. The list |
| # must be a comma separated list of JAR file names. |
| org.apache.catalina.startup.ContextConfig.jarsToSkip= |
| |
| # Additional JARs (over and above the default JARs listed above) to skip when |
| # scanning for TLDs. The list must be a comma separated list of JAR file names. |
| org.apache.catalina.startup.TldConfig.jarsToSkip=tomcat7-websocket.jar |
| |
| # |
| # String cache configuration. |
| tomcat.util.buf.StringCache.byte.enabled=true |
| #tomcat.util.buf.StringCache.char.enabled=true |
| #tomcat.util.buf.StringCache.trainThreshold=500000 |
| #tomcat.util.buf.StringCache.cacheSize=5000 |
| |
| # This system property is deprecated. Use the relaxedPathChars relaxedQueryChars |
| # attributes of the Connector instead. These attributes permit a wider range of |
| # characters to be configured as valid. |
| # Allow for changes to HTTP request validation |
| # WARNING: Using this option may expose the server to CVE-2016-6816 |
| #tomcat.util.http.parser.HttpParser.requestTargetAllow=| |