page flow source code is visible from the browser in netui-samples
------------------------------------------------------------------

         Key: BEEHIVE-736
         URL: http://issues.apache.org/jira/browse/BEEHIVE-736
     Project: Beehive
        Type: Bug
  Components: NetUI  
    Versions: V1    
    Reporter: Rich Feit
    Priority: Critical
     Fix For: V1


The netui-blank webapp (after the fix for 
http://issues.apache.org/jira/browse/BEEHIVE-735) and netui-samples both have 
page flow source files (Controller.java) mixed into the web content 
directories.  They must also have a Servlet Filter that prevents the Java 
source from being visible from the browser.

Repro:
    - Build/deploy netui-samples.
    - Hit /netui-samples/Controller.java in the browser.

EXPECTED: see a Forbidden error in the browser (with no source code displayed)
ACTUAL: see the page flow source code

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira

Reply via email to