Hi

Looks like it is a well known issue,

"WARNING: Someone is trying to access a secure resource" search produces few matches on Google :-)

I wonder, can the following help:

http://stackoverflow.com/questions/25141300/web-server-firewall-access-browser-unsecure-content-warning

?

The scenario described there is probably somewhat unrelated but if you can configure the mod proxy somehow for Tomcat to accept it as a valid request then it may work...

Let me know please if a mod proxy can help; I'll keep an eye on this issue in meantime too and see if may be the dispatcher provider can be configured to do a direct interaction with the /WEB-INF resources... FYI, JAX-RS 2.1 and MVC efforts will probably offer something standardized in this area too...

Cheers, Sergey



On 11/12/14 13:22, Anthony Fryer wrote:
Hi All,

I'm using cxf 3.0.2 and have jax-rs services and am using the
org.apache.cxf.jaxrs.provider.RequestDispatcherProvider to forward response
objects to jsf facelets for rendering the text/html responses.

This is working fine if the xhtml file is outside of the WEB-INF folder, but
when i try to put it inside WEB-INF it doesn't work.

My configuration when trying to use the xhtml file inside of the WEB-INF
folder looks like this...

    <bean id="dispatchProvider"
       class="org.apache.cxf.jaxrs.provider.RequestDispatcherProvider">
       <property name="classResources">
          <map>
             <entry

key="com.virginaustralia.checkin_api.v3.model.ItineraryReadRS"
                value="/WEB-INF/view/faces/travelItineraryReadRS.xhtml" />
          </map>
       </property>
       <property name="beanNames">
           <map>
               <entry
key="com.virginaustralia.checkin_api.v3.model.ItineraryReadRS"
value="reservation"/>
           </map>
       </property>
    </bean>

When i do a GET request, on my rest service that returns the
ItineraryReadRS, i get the following log message printed out and a 404
response...

Dec 11, 2014 11:18:31 PM javax.faces.webapp.FacesServlet service
WARNING:  Someone is trying to access a secure resource :
/WEB-INF/view/faces/travelItineraryReadRS.xhtml
  remote address is 0:0:0:0:0:0:0:1
  remote host is 0:0:0:0:0:0:0:1
  remote user is null
  request URI is /kiosk-checkin-webapp/rest/api/itinerary/JIFEER

If i move the xhtml file outside of the WEB-INF folder, it works fine.

I'm just wondering how can i get this to work using the WEB-INF folder
because the xhtml files should not be public resources.

I'm using cxf 3.02, tomcat 7.0.55 and myfaces 2.2.5.





--
View this message in context: 
http://cxf.547215.n5.nabble.com/RequestDispatcherProvider-error-dispatching-to-xhtml-in-WEB-INF-folder-tp5752229.html
Sent from the cxf-user mailing list archive at Nabble.com.



Reply via email to