How to prevent JSP files from being publicly directly accessible?

Hi, I've had a pen test finding where our JSP files, which are in the public directories of our web app can be opened directly as long as the user knows the name of the JSP file. This is a site where a login is mandatory to access any content. Struts actions are already protected where the action

Form submit vs url.openConnection

Hi , We are developing a browser based software which will run in WAN environment, Currently we are using struts form to submit & send the data from input view to the action class . If our action class updates or throws any error we have to forward the response to same input view. Is thi