A little background:
I have Front-Controller Servlet that fowards all requests to jsp's located
outside the application war. So, for example, http://localhost/myapp/test.jsp
is actually a jsp located at (on windows) c:/content/client1/pages/test.jsp. I
accomplish by doing the following:
| ServletConfig currentConfig = getServletConfig();
| ServletContext otherContext =
currentConfig.getServletContext().getContext("/otherapp");
| RequestDispatcher dispatch = otherContext.getRequestDispatcher(page);
| dispatch.forward(request, response);
|
The issue is that I have the following in my web.xml:
| ...
| <servlet>
| <servlet-name>FrontServletController</servlet-name>
|
<servlet-class>com.diginsite.product.webcenter.website.FileController</servlet-class>
| </servlet>
| <servlet-mapping>
| <servlet-name>FrontServletController</servlet-name>
| <url-pattern>*.jsp</url-pattern>
| </servlet-mapping>
| <jsp-config>
| <jsp-property-group>
| <url-pattern>*.jsp</url-pattern>
| <scripting-invalid>true</scripting-invalid>
| </jsp-property-group>
| </jsp-config>
| ...
|
However, the c:/content/client1/pages/test.jsp file does contain a scriptlet
and it is working fine.
I've attempted changing the url pattern of the jsp-property-group directly to
/*/*/*/test.jsp with no luck as well as changing the url-pattern of the servlet
to *.myext.
-------------------------------------------------------------------------------------
Since the "otherapp" doesn't contain a web.xml I decided to try and modify the
$JBOSS_HOME/server/myapp/deploy/jbossweb-tomcat55.sar/conf/web.xml to include:
<jsp-config>
| <jsp-property-group>
| <url-pattern>*.jsp</url-pattern>
| <scripting-invalid>true</scripting-invalid>
| </jsp-property-group>
| </jsp-config>
This doesn't work either. Any other ideas of how I can prevent any jsp from
containing scriptlets.
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4042442#4042442
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4042442
_______________________________________________
jboss-user mailing list
[email protected]
https://lists.jboss.org/mailman/listinfo/jboss-user
