Re: jsp in WEB-INF

2010-07-16 Thread Miguel
On Fri, Jul 16, 2010 at 03:24, Johannes Geppert wrote: > > together with convention plugin ther exists this constant > >     > > this works fine for me, bit I don't know a solution without convention > plugin. > > Best Regards > > Johannes Geppert This solution sounds very interesting, and it's e

Re: jsp in WEB-INF

2010-07-16 Thread Greg Lindholm
Add the following to your web.xml file and change the url-pattern's to catch any jsp files you do not want the user to have direct access to. Prevent access to raw pages. Raw Pages /error.jsp /struts/* /META-INF/* No roles, so no direct access

Re: jsp in WEB-INF

2010-07-16 Thread J_e_f_f
Miguel-55 wrote: > > I use struts 2.1.81. and I don't want that my users access directly my > .jsp, so I put them inside WEB-INF. > You don't *have* to put your JSPs in WEB-INF to protect them from direct access. You can put them in folders under the web root named according to your package n

Re: jsp in WEB-INF

2010-07-16 Thread Johannes Geppert
togehter with convention plugin ther exists this constant this works fine for me, bit I don't know a solution without convention plugin. Best Regards Johannes Geppert Miguel-55 wrote: > > Hello, > > I use struts 2.1.81. and I don't want that my users access directly my > .jsp, so I pu