hi,
thanks. I get the point with pages being positioned below /WEB-INF/ to
enforce security and the usage of controler components. But that is not
the case with struts-blank.war: the /pages folder is not inside
/WEB-INF/ and I can also call pages in /pages directly, like:
http://localhost:8080/struts-blank/pages/Welcome.jsp
What made me wonder in the first place was: I added catalina-ant.jar
tasks to the buildfile, set web.home to basedir /WEB-INF/ and after
installation nothing worked. Of course not, because there's no index.jsp
inside WEB-INF and anyway: if there was one, it would not be served.
My workaround was to set web.home to ${basedir}/../ which looks ugly,
but works.
I think I have to rething my assumption ${basedir} == ${web.home}.
bye,
andy
From: Andy Pahne <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: struts-blank.war basedir
> Date: 11 Jul 2003 13:06:57 +0200
>
>
> hi,
>
> when I had a look into struts-blank.war (Struts 1.1) I found that the
> ${basedir} in the supplied build file is set to /WEB_INF/. I would have
> set it to the directory below WEB-INF, so that index.jsp or the pages
> folder also is part of the project.
>
> Maybe I am wrong, but I simply cannot understand this at the moment.
> Anybody can tell me, why /WEB-INF was choosen?
>
> andy pahne
>
>
> ______________________________________________________________________
>
> From: Mark Lowe <[EMAIL PROTECTED]>
> To: Struts Users Mailing List <[EMAIL PROTECTED]>
> Subject: Re: struts-blank.war basedir
> Date: 11 Jul 2003 12:14:07 +0100
>
> Andy
>
> I think that putting your jsp's in /WEB-INF is considered better
> nowadays cos nobody can make a direct request for it.. This means all
> requests are mediated by actions and thus there's no exposure to the
> underlying file structure.. I remember that there were a lot o debates
> on this, but I believe that this approach is considered, and probably
> is, more secure..
>
> cheers mark
>
> On Friday, July 11, 2003, at 12:06 PM, Andy Pahne wrote:
>
> >
> > hi,
> >
> > when I had a look into struts-blank.war (Struts 1.1) I found that the
> > ${basedir} in the supplied build file is set to /WEB_INF/. I would have
> > set it to the directory below WEB-INF, so that index.jsp or the pages
> > folder also is part of the project.
> >
> > Maybe I am wrong, but I simply cannot understand this at the moment.
> > Anybody can tell me, why /WEB-INF was choosen?
> >
> > andy pahne
