http://coldfusion.com logo
Join Slack
Powered by
Lucee has a configuration option to move the WEB-I...
# lucee
s
Lucee has a configuration option to move the WEB-INF folder outside of the webroot. https://docs.lucee.org/guides/installing-lucee/securing-webinf.html Does anyone have information about how that is achieved? Is that some Tomcat configuration? Or is this custom param something that’s used by the Loader class?
b
@Seth Feldkamp Not quite-- Lucee doesn't really use the web inf directly
Lucee has the option to move the Lucee web context folder outside of the web root.
By default, Lucee creates the web context in 
<webroot>/WEB-INF/lucee
To change it, you need to manually edit the 
web.xml
file in your Lucee war (yuck)
I'm 98% sure there is an env var you can set as well which will control this without needing to touch the XMl
And if you're on CommandBox (which manages the web.xml for you) there is a first-class setting in the 
server.json
to control where it goes.
Just keep in mind that if you move it from the webroot, you MUST use one of the dynamic placeholders like 
{web-context-label}
or all your web contexts will conflict by pointing to the same folder.
q
In Lucee6 with "single host" mode, all the Lucee files will be outside the webroot. There will be a WEB-INF directory created, but it will be empty.
👍 1
Open in Slack
PreviousNext
Powered by