Re: struts/jsp security/access question

2006-01-19 Thread Dave Newton
Leon Rosenberg wrote: > 4. put all jsps under WEB-INF so they are NOT accessable via url. > always link urls to actions and forward to jsps. Make a simply forward > action (the only line: return mapping.findForward("success"); ) for > jsp which do not need any preprocessing > Or use the action m

RE: struts/jsp security/access question

2006-01-19 Thread David Thielen
: Struts Users Mailing List Subject: Re: struts/jsp security/access question 4. put all jsps under WEB-INF so they are NOT accessable via url. always link urls to actions and forward to jsps. Make a simply forward action (the only line: return mapping.findForward("success"); ) for jsp wh

RE: struts/jsp security/access question

2006-01-19 Thread George.Dinwiddie
Why isn't your jsp page under WEB-INF? - George http://www.idiacomputing.com > -Original Message- > From: David Thielen [mailto:[EMAIL PROTECTED] > Sent: Thursday, January 19, 2006 5:14 PM > To: user@struts.apache.org > Subject: struts/jsp security/access question > > > Hi; > >

Re: struts/jsp security/access question

2006-01-19 Thread Leon Rosenberg
4. put all jsps under WEB-INF so they are NOT accessable via url. always link urls to actions and forward to jsps. Make a simply forward action (the only line: return mapping.findForward("success"); ) for jsp which do not need any preprocessing regards Leon On 1/19/06, David Thielen <[EMAIL PROTE