Roman Sokolyuk wrote:
Additionally, does it follow that <img> elements have to refer to images
located outside the WEB-INF directory (Since no content from WEB-INF can be
served directly to the browser request)? Is there a way to use CSS and
images from within WEB-INf so that a client wouldn't be able to get to them
on its own?
Basic answer : no.
This one of those subjects on which enormous amounts of bandwidth and
ink have been spent already, and the answer is basically, definitely,
and still : NO.
If you are really a newbie and want to avoid spending many useless hours
in your future career on that subject, just remember this : anything you
put on a website and make acessible in any way through a URL (even a
relative one) is accessible by anyone, with a browser or with any HTTP
client program, self-written or not, and can be downloaded, saved,
copied, modified, perverted, and re-used. Nothing in an HTML page is
hidden, once you save the page to disk.
And it has to be, otherwise how would the browser get it ?
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org