http://<windchillserver>/Windchill/somePropertiesFile.properties happily displays the contents of the properties file??

[RandyJones]

Windchill PDMLink 10.2 M020-CPS09 and M030-CPS02

I just noticed that I can display the contents of properties files by constructing a url to the properties file. For example to display the contents of wt.properties use this:

http://<windchillserver>/Windchill/wt.properties

Should this really be allowed??

I am wondering if I have something mis-configured in Apache config files or somewhere else.

[Devidas]

Yes, Its allowed out of the box.

[JørnAHansen]

That's why sensitive information like diverse passwords are encrypted and stored elsewhere so it does not show up in the clear in the .properties files. So I wouldn't think of those files containing any real sensitive information.