tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From kazukin6 <coolwh...@mail.ru>
Subject Re: Disable java code execution <%blabla%> in jsp, but permits tags
Date Sat, 13 Sep 2008 15:58:59 GMT

We want them to be able to customize information they get from our system by
using custom tags


H. Hall wrote:
> 
> kazukin6 wrote:
>> Plz Help !!
>> Is it possible to disable all java code execution within jsp page (by
>> security manager or something)
>> but allow custom tags to be executed?
>>
>> The problem is that the users can change jsp files, and due to security
>> reasons we can allow them to use only tags 
>>   
> Why are users allowed to change jsp files?
> 
> HH
> 
> 
> 
> -- 
> H. Hall
> ReedyRiver Group LLC
> http://www.reedyriver.com
> 
> 
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
> 
> 
> 

-- 
View this message in context: http://www.nabble.com/Disable-java-code-execution-%3C-blabla-%3E-in-jsp%2C-but-permits-tags-tp19415053p19471795.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message