cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Showing results for 
Search instead for 
Did you mean: 

We are happy to announce the new Windchill Customization board! Learn more.

http://<windchillserver>/Windchill/somePropertiesFile.properties happily displays the contents of the properties file??

RandyJones
19-Tanzanite

http://<windchillserver>/Windchill/somePropertiesFile.properties happily displays the contents of the properties file??

Windchill PDMLink 10.2 M020-CPS09 and M030-CPS02

I just noticed that I can display the contents of properties files by constructing a url to the properties file. For example to display the contents of wt.properties use this:

http://<windchillserver>/Windchill/wt.properties

 

Should this really be allowed??

I am wondering if I have something mis-configured in Apache config files or somewhere else.

2 REPLIES 2

Yes, Its allowed out of the box.

That's why sensitive information like diverse passwords are encrypted and stored elsewhere so it does not show up in the clear in the .properties files. So I wouldn't think of those files containing any real sensitive information.

Top Tags