In such cases its recommended (though not unanimously - we had a bit of a debate about this a couple of weeks ago on the list!) that you also put your JSPs under WEB-INF so that they cannot be directly accessed from the client.
jonathan zhang wrote:
is it a good idea to have a direct link to jsp instead of going through an action in a jsp page? thanks
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]