tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Martin Gainty <mgai...@hotmail.com>
Subject RE: restricted use JSP impl
Date Sat, 04 Oct 2008 21:20:56 GMT

yes if you set scripting-invalid to true as described here (from web.xml)

<web-app
xmlns="http://java.sun.com/xml/ns/j2ee"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd"
version="2.4">
 

	<jsp-config>
	    <jsp-property-group>
		    <url-pattern>*.jsp</url-pattern>
			<scripting-invalid>true</scripting-invalid>
		</jsp-property-group>
	</jsp-config>

let me know if is this is not what you're looking for..
Martin 
______________________________________________ 
Disclaimer and confidentiality note 
Everything in this e-mail and any attachments relates to the official business of Sender.
This transmission is of a confidential nature and Sender does not endorse distribution to
any party other than intended recipient. Sender does not necessarily endorse content contained
within this transmission. 


> From: rob@koberg.com
> To: users@tomcat.apache.org
> Subject: restricted use JSP impl
> Date: Sat, 4 Oct 2008 11:01:15 -0400
> 
> Hi,
> 
> Is there an implementation of JSP that only allows execution of java  
> code as provided by taglibs and EL? In other words, something that  
> will not allow declarations or scriptlets.
> 
> thanks,
> -Rob
> 
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
> 

_________________________________________________________________
Want to do more with Windows Live? Learn “10 hidden secrets” from Jamie.
http://windowslive.com/connect/post/jamiethomson.spaces.live.com-Blog-cns!550F681DAD532637!5295.entry?ocid=TXT_TAGLM_WL_domore_092008
Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message