For a portable solution, put this in your web.xml file instead: <security-constraint> <web-resource-collection> <web-resource-name>SecureAllJSPs</web-resource-name> <url-pattern>*.jsp</url-pattern> </web-resource-collection> <auth-constraint> <description> Protects all JSP files from direct access. Clients must go through the controller servlet. </description> <role-name>nobody</role-name> </auth-constraint> </security-constraint>
<security-role> <description>No one should be put in this role.</description> <role-name>nobody</role-name> </security-role>
From: "James Mitchell" <[EMAIL PROTECTED]>
Reply-To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
Subject: Re: Accessing JSP's under WEB-INF
Date: Wed, 29 Jan 2003 15:52:51 -0500
Aside from the fact that not every container supports it, no.
--
James Mitchell
----- Original Message -----
From: "White, Joshua A (AG, COMM)" <[EMAIL PROTECTED]>
To: "'Struts Users Mailing List'" <[EMAIL PROTECTED]>
Sent: Wednesday, January 29, 2003 3:04 PM
Subject: RE: Accessing JSP's under WEB-INF
> James,
>
> I couldn't have ask for anything more.
>
> Does anyone know of any performance problems with organizing your code in
> the manner?
>
> Joshua
>
> -----Original Message-----
> From: James Mitchell [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, January 29, 2003 2:57 PM
> To: Struts Users Mailing List
> Subject: Re: Accessing JSP's under WEB-INF
>
> You can download the struts-example that was modified to demonstrate this
> from the following URL:
>
> http://www.open-tools.org/struts-atlanta/downloads
>
>
>
> --
> James Mitchell
>
>
>
>
>
> ----- Original Message -----
> From: "White, Joshua A (AG, COMM)" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Wednesday, January 29, 2003 2:51 PM
> Subject: Accessing JSP's under WEB-INF
>
>
> > Hello all,
> >
> > I would like to put my struts related jsp files under the web-inf
> directory
> > in a folder called "securedocroot" so that they have no chance of being
> > called directly. The problem is that I do not know how you would call a
> > page from this folder. How would you map these jsp's in the
struts-config
> > file?
> >
> > If you have done this in an existing application, would you mind
positing
> > some example code and possible a brief explanation?
> >
> > Regards,
> >
> > Joshua
> >
> >
> > This communication, including attachments, is for the exclusive use of
> > addressee and may contain proprietary, confidential or privileged
> > information. If you are not the intended recipient, any use, copying,
> > disclosure, dissemination or distribution is strictly prohibited. If
> > you are not the intended recipient, please notify the sender
> > immediately by return email and delete this communication and destroy
all
> copies.
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
_________________________________________________________________
MSN 8 with e-mail virus protection service: 2 months FREE* http://join.msn.com/?page=features/virus
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
