Re: Disable JSP ?

[John Raley]

But you can do:

<url-pattern>/view/*</url-pattern>

Just put your protected pages under a protected directory.

Hicks, James wrote:

>You can use the <security-constraint/> and <security-role/> tags in your
>deployment description to block access to a JSP page.  The only problem with
>this is you have to list every single jsp file you want to protect.  You
>cant use the '*.jsp' expression to hide all jsp files. 
>