portals-jetspeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jon Stevens <...@latchkey.com>
Subject Re: Servlet 2.2 Spec. and serving files from the WEB-INF directory
Date Wed, 07 Mar 2001 20:41:21 GMT
on 3/7/01 12:19 PM, "Raphaƫl Luta" <raphael.luta@networks.groupvu.com>
wrote:

> I put the templates in the WEB-INF directory because for systems such as
> Velocity, they should never be accessed directly from a client so WEB-INF
> was a natural solution.

correct. or you can protect the directory with ACL's.

<http://scarab.tigris.org/source/browse/scarab/src/conf/web.xml?rev=1.2&cont
ent-type=text/x-cvsweb-markup>

    <security-constraint>
        <web-resource-collection>
            <web-resource-name>templates</web-resource-name>
            <url-pattern>/templates/*</url-pattern>
        </web-resource-collection>
        <web-resource-collection>
            <web-resource-name>logs</web-resource-name>
            <url-pattern>/logs/*</url-pattern>
        </web-resource-collection>
        <auth-constraint>
            <role-name>admin</role-name>
        </auth-constraint>
    </security-constraint>

That way, it is still easier for people to find the directory where the
templates are stored.

-jon

-- 
If you come from a Perl or PHP background, JSP is a way to take
your pain to new levels. --Anonymous
<http://jakarta.apache.org/velocity/ymtd/ymtd.html>


Mime
View raw message