+1
I think that's a pretty well known best practice.
- Dave
On Jan 31, 2006, at 1:43 PM, Allen Gilliland wrote:
anyone opposed to the idea of moving our jsps inside of the WEB-INF
folder? i would create a new folder there called "jsps", so the new
path would be /WEB-INF/jsps/website/* or /WEB-INF/jsps/weblog/*
i think there are a number of reasons for doing this, but most
prominent
would be ...
1. having the jsps inside the WEB-INF folder prevents direct access,
which is more secure. none of the jsps we use for the admin/editor
interface are meant to be accessed directly anyways.
2. moving the jsps into the WEB-INF folder also helps keep our url
space
clean.
3. this wouldn't affect anything about how things work, all we really
need to do is update the tiles config with the new locations and we
are
done.
-- Allen
