sob., 19 paź 2024 o 15:18 Wolfgang Knauf
<wolfgang.kn...@gmx.de.invalid> napisał(a):
> I have a "index.jsp" and invoke an action using "s:action" tag, then render
> data from this action. In the browser I navigate to this jsp direcly
> ("http://localhost/index.jsp"; instead of browsing to ".../index.action").
This is against our security recommendations and acceccing JSPs
directly won't be supported because in such case all the framework
guards are omitted
https://struts.apache.org/security/#never-expose-jsp-files-directly
Cheers
Łukasz
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org
