Yes. What I do is put my jsps in $WEBAPP/WEB-INF/jsp/foo.jsp (for
example), which prevents the client from requesting it directly. Views can
be mapped like that, so:

login.action=LoginAction
login.success=/WEB-INF/jsp/login/loggedin.jsp
login.input=/WEB-INF/jsp/login/loginform.jsp
login.error=/WEB-INF/jsp/login/loginform.jsp

XWork may change this significantly.

On Sat, 1 Mar 2003, John Benediktsson wrote:

> Is there an easy way within webwork to prevent access to the .jsp's and
> only allow access to .action requests?
>
> -----
> John Benediktsson
> Software Engineer
>
> Agari Mediaware, Inc.
> 3340 Ocean Park Blvd.
> Suite 3070
> Santa Monica, CA 90405
> 310-396-0810 x107
> www.agari.com <http://www.agari.com/>
>
>

---------------------------------------------------------
Joseph B. Ottinger                 [EMAIL PROTECTED]
http://enigmastation.com                    IT Consultant



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Opensymphony-webwork mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/opensymphony-webwork

Reply via email to