I can't find the reference, but someone (Janne?) mentioned a
vulnerability of JSPWiki to hacking because the JSP modules aren't
behind WEB-INF. Could someone expand on this issue - how serious is it,
and if it is serious, what could be done to remedy it?
TIA,
Terry