[
https://issues.apache.org/jira/browse/TAP5-703?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Thiago H. de Paula Figueiredo closed TAP5-703.
----------------------------------------------
Resolution: Invalid
I have just created a .tml class in a Tapestry project and tried to request it.
It gives me a 403 (Forbidden error). Anyway, you can put the .tml files in the
classpath (the recommended location) instead of context root.
> Improvement where to save tml files
> -----------------------------------
>
> Key: TAP5-703
> URL: https://issues.apache.org/jira/browse/TAP5-703
> Project: Tapestry 5
> Issue Type: Improvement
> Components: tapestry-core
> Affects Versions: 5.1.0.5, 5.0.18
> Reporter: Tam Du
>
> I request this feature for purpose of the security of website. Currently, I
> found that users can download tml files by putting ".tml" at the end of URL.
> Users can do like that because .tml files are put in the webroot folder of
> the project. To prevent download, I have 2 solutions for this case:
> Solution 1: .tml files can be saved anywhere in project, and Tapestry
> will support the configuration to determine where to save these files.
> Solution 2: Save tml file in the WEB_INF folder of project.
> I hope that next version of Tapestry will have this option.
> Thank you very much.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
