tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Graham Lea" <Graham...@forge.com.au>
Subject Hiding JSPs
Date Tue, 04 Jul 2000 05:47:32 GMT
I'm trying to hide JSPs from users while still being able to forward to
them.
Have tried to do this by putting them under the WEB-INF directory, because
this is hidden from users and any normal file that resides under it isn't
accessible, and normally just returns a 404 Not Found.

However, because JSPs are intercepted by the JspServlet, if a user enters
the URL...

     http://localhost:8080/WEB-INF/anything.jsp

they can get access to that page.

Does anyone know how I can get the "checking whether it's under WEB-INF"
thing (I don't know where this happens) to execute BEFORE the JspServlet is
invoked?

Thanks,

Graham Lea

Forge Research Pty Ltd
Email: GrahamLea@forge.com.au


Mime
View raw message