tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "H. Hall" <hhall1...@reedyriver.com>
Subject Re: Disable java code execution <%blabla%> in jsp, but permits tags
Date Sat, 13 Sep 2008 14:33:20 GMT
kazukin6 wrote:
> Plz Help !!
> Is it possible to disable all java code execution within jsp page (by
> security manager or something)
> but allow custom tags to be executed?
>
> The problem is that the users can change jsp files, and due to security
> reasons we can allow them to use only tags 
>   
Why are users allowed to change jsp files?

HH



-- 
H. Hall
ReedyRiver Group LLC
http://www.reedyriver.com


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message