1. Security Practices Guide
  2. Installation
  3. Application Server Security
  4. Secure the Application
  5. Ensure the Servlet Servlet is Disabled

4.3.5.3 Ensure the Servlet Servlet is Disabled

The application does not use the ServletServlet to create default mappings for servlets. All servlets are directly mapped to the required URLs.

Ensure that the following code snippet (or a similar one that uses the weblogic.servlet.ServletServlet) does not exist in the web.xml of the web application.

Figure 4-4 Ensure the Servlet Servlet is Disabled


Description of Figure 4-4 follows
Description of "Figure 4-4 Ensure the Servlet Servlet is Disabled"

Parent topic: Secure the Application