sob., 19 paź 2024 o 15:18 Wolfgang Knauf <[email protected]> napisał(a): > I have a "index.jsp" and invoke an action using "s:action" tag, then render > data from this action. In the browser I navigate to this jsp direcly > ("http://localhost/index.jsp"; instead of browsing to ".../index.action").
This is against our security recommendations and acceccing JSPs directly won't be supported because in such case all the framework guards are omitted https://struts.apache.org/security/#never-expose-jsp-files-directly Cheers Łukasz --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
