struts-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Manos Batsis <manos_li...@geekologue.com>
Subject Re: Restricting Direct Access to Jsp
Date Wed, 20 Jun 2007 17:55:31 GMT
Archer wrote:
> Hi,
> 
> I am using struts 1.3.8 for my application. Can anybody please help me how
> to restrict access to jsp pages directly in struts. I am not having any of
> jsp in web-inf, so I need to restrict direct access to JSP. Any suggestion
> will be a great help to me.
> 

Too many ways to do this, for example a servletfilter or web.xml

   <security-constraint>
       <web-resource-collection>
           <web-resource-name>no_access</web-resource-name>
           <url-pattern>*.jsp</url-pattern>
       </web-resource-collection>
       <auth-constraint/>
   </security-constraint>


hth,

Manos

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
For additional commands, e-mail: user-help@struts.apache.org


Mime
View raw message