RE: how to prevent users from directly accessing jsp files

Mailing List Subject: RE: how to prevent users from directly accessing jsp files Even I am facing the same problem. All JSP direct access /pages/* POST GET No Access restricted NO Access restricted Up on

RE: how to prevent users from directly accessing jsp files

] Sent: 23 June 2009 07:06 To: Struts Users Mailing List Subject: RE: how to prevent users from directly accessing jsp files I tried something like below it worked All JSP direct access /jsp/* POST GET No Access restricted

RE: how to prevent users from directly accessing jsp files

Message- From: Girish Naik [mailto:girish.n...@gmail.com] Sent: Friday, June 19, 2009 8:19 PM To: Struts Users Mailing List Subject: Re: how to prevent users from directly accessing jsp files But in that case the css, images, js is compromised rite? What if I want all to be secured? Regards

Re: how to prevent users from directly accessing jsp files

OMG!! now i need to write a new Web Browser ;) Regards, - Girish Naik Mobile:-+91-09740091638 girish.n...@gmail.com Rodney Dangerfield - "What a dog I got, his favorite bon

Re: how to prevent users from directly accessing jsp files

On Fri, Jun 19, 2009 at 10:48 AM, Girish Naik wrote: > But in that case the css, images, js is compromised rite? > What if I want all to be secured? > > > Regards, > - > Girish Naik > Wrong. You have to allow direct access the css, image an

Re: how to prevent users from directly accessing jsp files

But in that case the css, images, js is compromised rite? What if I want all to be secured? Regards, - Girish Naik Mobile:-+91-09740091638 girish.n...@gmail.com Fran Lebowitz -

Re: how to prevent users from directly accessing jsp files

> I tried putting the below string in web.xml, but all my css, js from the > application got blocked. But pages are coming. Is something missing or some > extra thing to be done? > > >Prevent access to raw pages. > >Raw Pages >/struts/* > >

Re: how to prevent users from directly accessing jsp files

Hi, I tried putting the below string in web.xml, but all my css, js from the application got blocked. But pages are coming. Is something missing or some extra thing to be done? Prevent access to raw pages. Raw Pages /struts/*

Re: how to prevent users from directly accessing jsp files

Can you please explain this a bit more.iam using Tiles Definiton On Thu, Jun 18, 2009 at 7:11 PM, Greg Lindholm wrote: > We put all our jsp file into a /struts/ folder then add the following > security contraint to web.xml > > > >Prevent access to raw pages. > >

Re: how to prevent users from directly accessing jsp files

On Thu, Jun 18, 2009 at 11:25 AM, Girish Naik wrote: > yes it will not show the directory listing. but how now a user has to guess > ur jsp name and its folder location which i think is difficult. And keeping > the jsps inside WEB-INF will make the coder to add the WEB-INF before the > page locat

Re: how to prevent users from directly accessing jsp files

yes it will not show the directory listing. but how now a user has to guess ur jsp name and its folder location which i think is difficult. And keeping the jsps inside WEB-INF will make the coder to add the WEB-INF before the page location. :( Regards,

Re: how to prevent users from directly accessing jsp files

On Thu, Jun 18, 2009 at 07:47:45PM +0530, Girish Naik wrote: > Go to Tomcat Home/conf/web.xml file. in this file put listings as false. > > listings > false > > > Regards, > - > Girish Naik doesn't that stil

Re: how to prevent users from directly accessing jsp files

Go to Tomcat Home/conf/web.xml file. in this file put listings as false. listings false Regards, - Girish Naik Mobile:-+91-09740091638 girish.n...@gmail.com Rodney Dangerfield

Re: how to prevent users from directly accessing jsp files

We put all our jsp file into a /struts/ folder then add the following security contraint to web.xml Prevent access to raw pages. Raw Pages /struts/* No roles, so no direct access On Thu, Jun 18, 2009 at 9:

Re: how to prevent users from directly accessing jsp files

Put the JSPs under /WEB-INF/ and refer to them as the destination of your Struts action results. jk On Thu, Jun 18, 2009 at 9:32 AM, abhishek reddy wrote: > how to prevent users from directly accessing jsp files, rather they have to > come thru sturts action? > > -- > Abhishek > -- Jim Kiley