"tom.baeyens(a)jboss.com" wrote : i also removed the comments in the web.xml about the security warning around the gpd deployment servlet. that should be in the documentation, i think. Fine, we can put it in the documentation - but we should also put it back in the web.xml. It does no harm being there, and it is an important indication that there is a security issue. Which there is. With security, you can not have too many warnings. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4054794#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...