catalina.properties 7.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155
  1. # Licensed to the Apache Software Foundation (ASF) under one or more
  2. # contributor license agreements. See the NOTICE file distributed with
  3. # this work for additional information regarding copyright ownership.
  4. # The ASF licenses this file to You under the Apache License, Version 2.0
  5. # (the "License"); you may not use this file except in compliance with
  6. # the License. You may obtain a copy of the License at
  7. #
  8. # http://www.apache.org/licenses/LICENSE-2.0
  9. #
  10. # Unless required by applicable law or agreed to in writing, software
  11. # distributed under the License is distributed on an "AS IS" BASIS,
  12. # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13. # See the License for the specific language governing permissions and
  14. # limitations under the License.
  15. #
  16. # List of comma-separated packages that start with or equal this string
  17. # will cause a security exception to be thrown when
  18. # passed to checkPackageAccess unless the
  19. # corresponding RuntimePermission ("accessClassInPackage."+package) has
  20. # been granted.
  21. package.access=sun.,org.apache.catalina.,org.apache.coyote.,org.apache.jasper.,org.apache.tomcat.
  22. #
  23. # List of comma-separated packages that start with or equal this string
  24. # will cause a security exception to be thrown when
  25. # passed to checkPackageDefinition unless the
  26. # corresponding RuntimePermission ("defineClassInPackage."+package) has
  27. # been granted.
  28. #
  29. # by default, no packages are restricted for definition, and none of
  30. # the class loaders supplied with the JDK call checkPackageDefinition.
  31. #
  32. package.definition=sun.,java.,org.apache.catalina.,org.apache.coyote.,\
  33. org.apache.jasper.,org.apache.naming.,org.apache.tomcat.
  34. #
  35. #
  36. # List of comma-separated paths defining the contents of the "common"
  37. # classloader. Prefixes should be used to define what is the repository type.
  38. # Path may be relative to the CATALINA_HOME or CATALINA_BASE path or absolute.
  39. # If left as blank,the JVM system loader will be used as Catalina's "common"
  40. # loader.
  41. # Examples:
  42. # "foo": Add this folder as a class repository
  43. # "foo/*.jar": Add all the JARs of the specified folder as class
  44. # repositories
  45. # "foo/bar.jar": Add bar.jar as a class repository
  46. #
  47. # Note: Values are enclosed in double quotes ("...") in case either the
  48. # ${catalina.base} path or the ${catalina.home} path contains a comma.
  49. # Because double quotes are used for quoting, the double quote character
  50. # may not appear in a path.
  51. common.loader="${catalina.base}/lib","${catalina.base}/lib/*.jar","${catalina.home}/lib","${catalina.home}/lib/*.jar"
  52. #
  53. # List of comma-separated paths defining the contents of the "server"
  54. # classloader. Prefixes should be used to define what is the repository type.
  55. # Path may be relative to the CATALINA_HOME or CATALINA_BASE path or absolute.
  56. # If left as blank, the "common" loader will be used as Catalina's "server"
  57. # loader.
  58. # Examples:
  59. # "foo": Add this folder as a class repository
  60. # "foo/*.jar": Add all the JARs of the specified folder as class
  61. # repositories
  62. # "foo/bar.jar": Add bar.jar as a class repository
  63. #
  64. # Note: Values may be enclosed in double quotes ("...") in case either the
  65. # ${catalina.base} path or the ${catalina.home} path contains a comma.
  66. # Because double quotes are used for quoting, the double quote character
  67. # may not appear in a path.
  68. server.loader=
  69. #
  70. # List of comma-separated paths defining the contents of the "shared"
  71. # classloader. Prefixes should be used to define what is the repository type.
  72. # Path may be relative to the CATALINA_BASE path or absolute. If left as blank,
  73. # the "common" loader will be used as Catalina's "shared" loader.
  74. # Examples:
  75. # "foo": Add this folder as a class repository
  76. # "foo/*.jar": Add all the JARs of the specified folder as class
  77. # repositories
  78. # "foo/bar.jar": Add bar.jar as a class repository
  79. # Please note that for single jars, e.g. bar.jar, you need the URL form
  80. # starting with file:.
  81. #
  82. # Note: Values may be enclosed in double quotes ("...") in case either the
  83. # ${catalina.base} path or the ${catalina.home} path contains a comma.
  84. # Because double quotes are used for quoting, the double quote character
  85. # may not appear in a path.
  86. shared.loader=
  87. # Default list of JAR files that should not be scanned using the JarScanner
  88. # functionality. This is typically used to scan JARs for configuration
  89. # information. JARs that do not contain such information may be excluded from
  90. # the scan to speed up the scanning process. This is the default list. JARs on
  91. # this list are excluded from all scans. The list must be a comma separated list
  92. # of JAR file names.
  93. # The list of JARs to skip may be over-ridden at a Context level for individual
  94. # scan types by configuring a JarScanner with a nested JarScanFilter.
  95. # The JARs listed below include:
  96. # - Tomcat Bootstrap JARs
  97. # - Tomcat API JARs
  98. # - Catalina JARs
  99. # - Jasper JARs
  100. # - Tomcat JARs
  101. # - Common non-Tomcat JARs
  102. # - Test JARs (JUnit, Cobertura and dependencies)
  103. tomcat.util.scan.StandardJarScanFilter.jarsToSkip=\
  104. bootstrap.jar,commons-daemon.jar,tomcat-juli.jar,\
  105. annotations-api.jar,el-api.jar,jsp-api.jar,servlet-api.jar,websocket-api.jar,\
  106. jaspic-api.jar,\
  107. catalina.jar,catalina-ant.jar,catalina-ha.jar,catalina-storeconfig.jar,\
  108. catalina-tribes.jar,\
  109. jasper.jar,jasper-el.jar,ecj-*.jar,\
  110. tomcat-api.jar,tomcat-util.jar,tomcat-util-scan.jar,tomcat-coyote.jar,\
  111. tomcat-dbcp.jar,tomcat-jni.jar,tomcat-websocket.jar,\
  112. tomcat-i18n-en.jar,tomcat-i18n-es.jar,tomcat-i18n-fr.jar,tomcat-i18n-ja.jar,\
  113. tomcat-juli-adapters.jar,catalina-jmx-remote.jar,catalina-ws.jar,\
  114. tomcat-jdbc.jar,\
  115. tools.jar,\
  116. commons-beanutils*.jar,commons-codec*.jar,commons-collections*.jar,\
  117. commons-dbcp*.jar,commons-digester*.jar,commons-fileupload*.jar,\
  118. commons-httpclient*.jar,commons-io*.jar,commons-lang*.jar,commons-logging*.jar,\
  119. commons-math*.jar,commons-pool*.jar,\
  120. jstl.jar,taglibs-standard-spec-*.jar,\
  121. geronimo-spec-jaxrpc*.jar,wsdl4j*.jar,\
  122. ant.jar,ant-junit*.jar,aspectj*.jar,jmx.jar,h2*.jar,hibernate*.jar,httpclient*.jar,\
  123. jmx-tools.jar,jta*.jar,log4j*.jar,mail*.jar,slf4j*.jar,\
  124. xercesImpl.jar,xmlParserAPIs.jar,xml-apis.jar,\
  125. junit.jar,junit-*.jar,hamcrest-*.jar,easymock-*.jar,cglib-*.jar,\
  126. objenesis-*.jar,ant-launcher.jar,\
  127. cobertura-*.jar,asm-*.jar,dom4j-*.jar,icu4j-*.jar,jaxen-*.jar,jdom-*.jar,\
  128. jetty-*.jar,oro-*.jar,servlet-api-*.jar,tagsoup-*.jar,xmlParserAPIs-*.jar,\
  129. xom-*.jar
  130. # Default list of JAR files that should be scanned that overrides the default
  131. # jarsToSkip list above. This is typically used to include a specific JAR that
  132. # has been excluded by a broad file name pattern in the jarsToSkip list.
  133. # The list of JARs to scan may be over-ridden at a Context level for individual
  134. # scan types by configuring a JarScanner with a nested JarScanFilter.
  135. tomcat.util.scan.StandardJarScanFilter.jarsToScan=\
  136. log4j-web*.jar,log4j-taglib*.jar,log4javascript*.jar,slf4j-taglib*.jar
  137. # String cache configuration.
  138. tomcat.util.buf.StringCache.byte.enabled=true
  139. #tomcat.util.buf.StringCache.char.enabled=true
  140. #tomcat.util.buf.StringCache.trainThreshold=500000
  141. #tomcat.util.buf.StringCache.cacheSize=5000
  142. # This system property is deprecated. Use the relaxedPathChars relaxedQueryChars
  143. # attributes of the Connector instead. These attributes permit a wider range of
  144. # characters to be configured as valid.
  145. # Allow for changes to HTTP request validation
  146. # WARNING: Using this option may expose the server to CVE-2016-6816
  147. #tomcat.util.http.parser.HttpParser.requestTargetAllow=|