Date: March 9, 2001
APAR:  PQ46735
Defect:  94578
Author: Todd Kaplinger

Problem Fixes:
-	Security hole concerning Windows and securing jsp's and static html files. (94578)
-       Unable to serve static files via SimpleFileServlet if specifying extension mapped urls
        (eg. "*.html" instead of the normal "/") after applying FP3. (94988)



Problem Summaries :


Internal Defect (94578)
======================
Windows and Netware security hole concerning JSP's amd static html files.


Internal Defect (94988)
======================
After applying fp3, unable to serve default static pages via SimpleFileServlet.
If servlet is defined with an extension mapped url (eg., "*.html" instead of the
normal "/"), WebSphere returns file not found.
For example, http://localhost/admin/index.html
would return file not found index.html.



How to apply:

  - Stop all application servers and the WebSphere administrative service.
  - Create a new directory, <WebSphereRoot>/AppServer/efixes and copy pq46735_3024.jar to that directory.
  - Edit <WebSphereRoot>/bin/admin.config and add <WebSphereRoot>/AppServer/efixes/pq46735_3024.jar to the beginning of
com.ibm.ejs.sm.adminserver.classpath.
  - Restart the WebSphere administrative service and application servers.