Re: html servlet flow

"Jeff Kish" <kishjjrjj@xxxxxxxxxxx> wrote in message news:ag34929iv6ciosf208sjg9tmh5l79ovuo2@xxxxxxxxxx

I'm still trying to get my head around what is going on between the
browser and Tomcat.

Still appreciate any elucidation, still studying.

The browser submits an HTTP request, and the server sends an HTTP response. That response usually contains HTML, but it could respond with anything (including images, flash animations, PDFs, etc.)

The server is free to send back any content it wants, and the browser is free to submit any HTTP request it wants.

When writing websites, you have to provide enough information in your responses so that the user can accomplish whatever tasks it is they want done. You also have to take into account the fact that users are free to send any request they want, and so you have to be able to handle non-sensical requests and not assume requests will arrive in any particular order or anything like that.

- Oliver

.

Relevant Pages

  • [NT] 04WebServer Multiple Vulnerabilities (CSS, Log File Injection, AUX DoS)
    ... 04WebServer is a HTTP server developed by Soft3304 for Windows platforms. ... Characters into Log File ... filtering on the request URL before writing it into the log file. ... following HTTP request, when submitted to a vulnerable 04WebServer, will ...
    (Securiteam)
  • Re: BASIC authentication Issues with IE - Part II - Solved but WHY?
    ... We have complete control of the Request and Response ... it is up to the browser to send the credentials. ... ASP runs internally on the server. ...
    (microsoft.public.inetserver.iis.security)
  • Re: client gets always every first time for every page a 401
    ... only the first request get 401. ... Why does my Browser in case 5 not submit the Basic Authorization String ... credentials as used in 3, because they have the same root. ... Explorer has established a connection with the server by using Basic or NTLM ...
    (microsoft.public.inetserver.iis.security)
  • Re: client gets always every first time for every page a 401
    ... When the browser makes a request, ... If the server does not accept Anonymous or if the Anonymous ... then the browser must support this method to communicate with the ...
    (microsoft.public.inetserver.iis.security)
  • RE: DNS response Issue
    ... The browser depends on OS settings for name resolution. ... TCP/IP settings on the NIC point to the server for DNS ... >> 2 computers connected to the Switch (One a server another a client), ... >> client is removed from the LAN so any request from the client has to go ...
    (microsoft.public.win2000.dns)