Re: AW: AW: Hiding pages under WEB-INF

2005-02-24 Thread Ted Husted
On Thu, 24 Feb 2005 00:15:51 +0100, Leon Rosenberg wrote: > So, (a contra-argument to my own post before) if you want a high- > performance app, > consider moving all static content to another webserver, an apache > or squid in front of apache/tomcat. True. In every benchmark I've ever run, servin

AW: AW: Hiding pages under WEB-INF

2005-02-23 Thread Leon Rosenberg
topher [mailto:[EMAIL PROTECTED] > Gesendet: Donnerstag, 24. Februar 2005 00:07 > An: Struts Users Mailing List > Betreff: Re: AW: Hiding pages under WEB-INF > > Oops... I slightly misread the last post, though most of what > I said is still relevant. > > Here's the link

AW: AW: Hiding pages under WEB-INF

2005-02-23 Thread Leon Rosenberg
topher [mailto:[EMAIL PROTECTED] > Gesendet: Donnerstag, 24. Februar 2005 00:07 > An: Struts Users Mailing List > Betreff: Re: AW: Hiding pages under WEB-INF > > Oops... I slightly misread the last post, though most of what > I said is still relevant. > > Here's the link

Re: AW: Hiding pages under WEB-INF

2005-02-23 Thread Tim Christopher
Oops... I slightly misread the last post, though most of what I said is still relevant. Here's the link I mentioned: http://www.junlu.com/msg/143431.html And to answer your question about site statistics: As all requests for resources will go through an action (see link) you could for example inc

Re: AW: Hiding pages under WEB-INF

2005-02-23 Thread Tim Christopher
I'd have to say not really ;o) ... Though I'm sure you could probably prevent hotlinking and whatever else if you did. Personally I don't think its worth the bother. Note: If you put resources that the user requires behind the WEB-INF folder (i.e. JS, CSS, images, etc.) you will have to write so

Re: Hiding pages under WEB-INF

2005-02-23 Thread Frank W. Zammetti
Yep, that was part of my argument to Dakota Jack as I recall... Then again, in some situations one could see it as being quite advantageous to always get a fresh copy from the server, and this approach should ensure that. Good point about the security considerations... In fact, I seem to remem

Re: Hiding pages under WEB-INF

2005-02-23 Thread Frank W. Zammetti
I've heard of people storing all but one entry page (which would be needed at a minimum no matter what). I'm not sure what the typical answer is from people that use this technique though. -- Frank W. Zammetti Founder and Chief Software Architect Omnytex Technologies http://www.omnytex.com Neil

Re: Hiding pages under WEB-INF

2005-02-23 Thread Frank W. Zammetti
I'm not an advocate of this approach, so I'm not sure I'm the one to answer this question... Where is Dakota Jack when we need him?!? ;) That being said... Aside from the obvious security benefits, I often here caching as a big reason. Jack and I had a debate two weeks or so ago about whether s

Re: Hiding pages under WEB-INF

2005-02-23 Thread Leon Rosenberg
> I understand the security benefits for a JSP page, but are > there any for CSS pages, JS files, or images? What does it > help with statistics? Some people/sites restricts access to some images (and other things), as they could contain some information worth protection. As for statistics: Y

Re: Hiding pages under WEB-INF

2005-02-23 Thread Leon Rosenberg
> I understand the security benefits for a JSP page, but are > there any for CSS pages, JS files, or images? What does it > help with statistics? Some people/sites restricts access to some images (and other things), as they could contain some information worth protection. As for statistics: Y

Re: Hiding pages under WEB-INF

2005-02-23 Thread Jason Lea
I hide JSPs under WEB-INF, but I leave my images, .css and .js files outside so they can be served by the web server. I use forwards in struts to handle url rewriting, instead of linking directly to the css from a .jsp eg Unless there is a reason (eg restricted access etc) I wouldn't use an

Re: AW: Hiding pages under WEB-INF

2005-02-23 Thread Jeff Beal
I understand the security benefits for a JSP page, but are there any for CSS pages, JS files, or images? What does it help with statistics? On Wed, 23 Feb 2005 22:44:37 +0100, Leon Rosenberg <[EMAIL PROTECTED]> wrote: > > What would be the benefits to doing this? (just curious) > > Control acc

Re: Hiding pages under WEB-INF

2005-02-23 Thread Neil Erdwien
I've been meaning to ask a related question. Do people do this for absolutely *every* page? In particular, what about help pages, FAQs, etc. that have no processing needed? Jeff Beal wrote: Quite a few people seem to do this. Quite a few people do not. I think it qualifies as "widely practic

AW: Hiding pages under WEB-INF

2005-02-23 Thread Leon Rosenberg
ng List; [EMAIL PROTECTED] > Betreff: Re: Hiding pages under WEB-INF > > What would be the benefits to doing this? (just curious) > > > On Wed, 23 Feb 2005 16:37:45 -0500, Frank W. Zammetti > <[EMAIL PROTECTED]> wrote: > > > So, something like: > >

AW: Hiding pages under WEB-INF

2005-02-23 Thread Leon Rosenberg
ng List; [EMAIL PROTECTED] > Betreff: Re: Hiding pages under WEB-INF > > What would be the benefits to doing this? (just curious) > > > On Wed, 23 Feb 2005 16:37:45 -0500, Frank W. Zammetti > <[EMAIL PROTECTED]> wrote: > > > So, something like: > >

Re: Hiding pages under WEB-INF

2005-02-23 Thread Jeff Beal
What would be the benefits to doing this? (just curious) On Wed, 23 Feb 2005 16:37:45 -0500, Frank W. Zammetti <[EMAIL PROTECTED]> wrote: > So, something like: > > > > ... will call your Action, which presumably retrieves the referenced > image and returns it. You can do this for stylesheet

RE: Hiding pages under WEB-INF

2005-02-23 Thread Burns, Scott
Very cool and thanks!! Scott -Original Message- From: Frank W. Zammetti [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 23, 2005 4:38 PM To: Struts Users Mailing List Subject: Re: Hiding pages under WEB-INF Jarnot Voytek Contr AU/SC wrote: > Right, js, css, and image fi

Re: Hiding pages under WEB-INF

2005-02-23 Thread Frank W. Zammetti
Jarnot Voytek Contr AU/SC wrote: > Right, js, css, and image files don't belong under web-inf. I know someone who will disagree vigorously (where are you D.J.?!?) :) Seriously though, many people DO use this technique, and you can in fact put everything under it, even the js, css, img, etc. conten

RE: Hiding pages under WEB-INF

2005-02-23 Thread Jarnot Voytek Contr AU/SC
Right, js, css, and image files don't belong under web-inf. -- Voytek Jarnot > -Original Message- > From: Jeff Beal [mailto:[EMAIL PROTECTED] > Sent: Wednesday, February 23, 2005 3:27 PM > To: Struts Users Mailing List > Subject: Re: Hiding pages under WEB-INF

Re: Hiding pages under WEB-INF

2005-02-23 Thread Jeff Beal
Quite a few people seem to do this. Quite a few people do not. I think it qualifies as "widely practiced". As for the stylesheets, the browser won't be able to pull them out of WEB-INF. (That's the point of "hiding" things under WEB-INF.) On Wed, 23 Feb 2005 15:02:30 -0600, Burns, Scott <[EMA

Hiding pages under WEB-INF

2005-02-23 Thread Burns, Scott
I have two questions regarding this topic.  Thanks in advance for any advise!! Scott http://wiki.apache.org/struts/StrutsCatalogHidingPagesUnderWEBINF 1)  Is this a widely practiced?  2) I am having trouble finding my style sheet. I have put it in the WEB-INF/style directory but still it is