tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Graham Lea" <>
Subject Hiding JSPs
Date Tue, 04 Jul 2000 05:47:32 GMT
I'm trying to hide JSPs from users while still being able to forward to
Have tried to do this by putting them under the WEB-INF directory, because
this is hidden from users and any normal file that resides under it isn't
accessible, and normally just returns a 404 Not Found.

However, because JSPs are intercepted by the JspServlet, if a user enters
the URL...


they can get access to that page.

Does anyone know how I can get the "checking whether it's under WEB-INF"
thing (I don't know where this happens) to execute BEFORE the JspServlet is


Graham Lea

Forge Research Pty Ltd

View raw message