Re: Encrypting/Protecting JSP/Struts source code

[Mikolaj Rydzewski]

Tom Burke wrote:

Is there any way in which the deployed WAR file, and all the files that explode 
out of it, can be hidden/encrypted/protected on the server, while still 
allowing them to be executed by Tomcat? The app is almost completely 
JSP/Struts, there is hardly any HTML at all (if any in fact).

You will have to use source code obfuscator, i.e. http://java-source.net/open-source/obfuscators

--
Mikolaj Rydzewski  <[EMAIL PROTECTED]>
Becomo S.A.
tel. (12) 2927104

But when it comes to struts you'll have to disable from obfuscating class names and public methods (at least Action.execute and ActionForm getters/setters). Precompiling JSPs IMO doesn' make any good. In theory, JSP has nothing to application's bussines logic. So there's no point in preventing customer to change them.

smime.p7s
Description: S/MIME Cryptographic Signature