RE: is there a way to download a jsp file from server withoutexecuting it?

2003-08-10 Thread Jeff Tulley
Just be EXTREMELY careful; such servlets/jsps tend to open up security holes, if not properly coded, which allow users of said servlet/jsp to get to other files elsewhere on your hard disk (a password file, config files, etc). Make sure you limit the scope of what jsp sources can be viewed, and

Re: is there a way to download a jsp file from server withoutexecuting it?

2003-08-09 Thread Eric J. Pinnell
Or stealing :) -e On Fri, 8 Aug 2003, Tim Funk wrote: I hope not, we tend to call that a security flaw. -Tim Prince wrote: hi is there a way to download a .jsp file without executing it? ie i need the content od jsp file, not the result of that jsp file. same question goes with