[jira] Closed: (TAP5-703) Improvement where to save tml files
[ https://issues.apache.org/jira/browse/TAP5-703?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Howard M. Lewis Ship closed TAP5-703. - Resolution: Won't Fix Assignee: Howard M. Lewis Ship You can store .tml files on the class path, where they are not accessible to users (due to the default asset security configuration). Improvement where to save tml files --- Key: TAP5-703 URL: https://issues.apache.org/jira/browse/TAP5-703 Project: Tapestry 5 Issue Type: Improvement Components: tapestry-core Affects Versions: 5.1.0.5, 5.0.18 Reporter: Tam Du Assignee: Howard M. Lewis Ship Attachments: mvncmsModule.java I request this feature for purpose of the security of website. Currently, I found that users can download tml files by putting .tml at the end of URL. Users can do like that because .tml files are put in the webroot folder of the project. To prevent download, I have 2 solutions for this case: Solution 1: .tml files can be saved anywhere in project, and Tapestry will support the configuration to determine where to save these files. Solution 2: Save tml file in the WEB_INF folder of project. I hope that next version of Tapestry will have this option. Thank you very much. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.
[jira] Closed: (TAP5-703) Improvement where to save tml files
[ https://issues.apache.org/jira/browse/TAP5-703?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Thiago H. de Paula Figueiredo closed TAP5-703. -- Resolution: Invalid I have just created a .tml class in a Tapestry project and tried to request it. It gives me a 403 (Forbidden error). Anyway, you can put the .tml files in the classpath (the recommended location) instead of context root. Improvement where to save tml files --- Key: TAP5-703 URL: https://issues.apache.org/jira/browse/TAP5-703 Project: Tapestry 5 Issue Type: Improvement Components: tapestry-core Affects Versions: 5.1.0.5, 5.0.18 Reporter: Tam Du I request this feature for purpose of the security of website. Currently, I found that users can download tml files by putting .tml at the end of URL. Users can do like that because .tml files are put in the webroot folder of the project. To prevent download, I have 2 solutions for this case: Solution 1: .tml files can be saved anywhere in project, and Tapestry will support the configuration to determine where to save these files. Solution 2: Save tml file in the WEB_INF folder of project. I hope that next version of Tapestry will have this option. Thank you very much. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.
