Does anyone know how WebSphere 4.0 treats jsps under the WEB-INF?

dave

-----Original Message-----
From: Ted Husted [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 18, 2001 12:14 PM
To: Struts Users Mailing List
Subject: Re: 404 error when placing JSPs beneath WEB-INF


BEA is of the opinion that accessing JSPs even from an internal forward
should be disallowed. 

Though, I'm told that Sun disagrees.


Tom Lister wrote:
> 
> I thought that although you cannot access directly, you are allowed to
> forward from a servlet/jsp. And that this is an option for securing
pages.
> Does this have any bearing on my earlier post re trying to access
> WEB-INF/javadoc/index.html?
> :-)
> Regards
> [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
> Advanced Banking Solutions Limited
> +44 (0)20 7448 9146
>
º¤ø,¸¸,ø¤º°'°º¤ø,¸¸,ø¤º°'°º¤ø,¸¸,ø¤ºº¤ø,¸¸,ø¤º°'°º¤ø,¸¸,ø¤º°'°º¤ø,¸¸,ø¤º
º¤ø,
> ¸¸,ø¤º°'°º¤ø,¸¸,
> This email and any attachments are confidential. They may contain
privileged
> 
> information or useless trivia and are intended for the named addressee
(s)
> only.
> They must not be distributed without our consent. If you are not the
> intended recipient,
> please notify us immediately and do not disclose, distribute, or
retain this
> email or any
> part of it. Unless expressly stated, opinions in this email are those
of the
> 
> individual sender, and not of Advanced Banking Solutions Limited. We
believe
> 
> but do not warrant that this e-mail and any attachments are virus
free. You
> must
> therefore take full responsibility for virus checking. Advanced
Banking
> Solutions
> Limited and its subsidiaries reserve the right to monitor all email
> communications
> through their networks.
>
º¤ø,¸¸,ø¤º°'°º¤ø,¸¸,ø¤º°'°º¤ø,¸¸,ø¤ºº¤ø,¸¸,ø¤º°'°º¤ø,¸¸,ø¤º°'°º¤ø,¸¸,ø¤º
º¤ø,
> ¸¸,ø¤º°'°º¤ø,¸¸,
> 
>         -----Original Message-----
>         From:   D. Veniseleas [SMTP:[EMAIL PROTECTED]]
>         Sent:   18 December 2001 16:11
>         To:     'Struts Users Mailing List'
>         Subject:        AW: 404 error when placing JSPs beneath
WEB-INF
> 
> 
>         -----BEGIN PGP SIGNED MESSAGE-----
>         Hash: SHA1
> 
>         Hi,
> 
>         You shouldn't have jsp's under WEB-INF, but only xml-files for
>         webapp-configuration,
>         compiled classes, libraries, tag-lib-descriptor-files etc.
>         WEB-INF and beneath is not accessible from outside.
> 
>         Regards,
> 
>         Dimitris
> 
>         > -----Ursprüngliche Nachricht-----
>         > Von:  [EMAIL PROTECTED] [SMTP:[EMAIL PROTECTED]]
>         > Gesendet am:  Dienstag, 18. Dezember 2001 16:40
>         > An:   [EMAIL PROTECTED]
>         > Betreff:      404 error when placing JSPs beneath WEB-INF
>         >
>         > After reading the Struts Catalogue and having spent a good
>         > amount of time trying to get the JSPs run under the
>         > web-inf directory, I figured out that there has been a
thread
>         > on "Can't place JSP beneath WEB-INF in WebLogic 6.0".
>         >
>         > I'm using BEA WL 6.1 and also have the same 404 error
mentioned
>         > in the message
>         >
> http://www.mail-archive.com/struts-user@jakarta.apache.org/msg14704.
>         > html . However, I also tried it on Tomcat4.0 and Tomcat3.2,
which
>         > both gave the same 404 error. So it seems to be something
I'm
> doing
>         > wrong.
>         >
>         > Just to make sure -- I have the following setup:
>         >
>         > 1) directory structure:
>         > - myApp
>         >     - web-inf
>         >         - jsp (contains one page: start.jsp)
>         >         - lib
>         >         - classes ...
>         >
>         > 2) struts-config.xml
>         >
>         > ...
>         > <action  path="/startIt"
>         >        type="mypackage.StartAction"
>         >        name="theForm"
>         >        scope="session"
>         >          validate="false"
>         >          parameter="commingIn"
>         >        input="/web-inf/jsp/start.jsp">
>         >     <forward name="display" path="/web-inf/jsp/start.jsp"/>
>         > </action>
>         >
>         > 3) StartAction
>         > perform(...){
>         > ...
>         >     System.out.println("forward path: " +
>         > mapping.findForward("display").getPath());
>         >     return (mapping.findForward(forward));
>         >   }
>         >
>         > which accurately prints out "path: /web-inf/jsp/start.jsp"
>         >
>         >
>         > Bea doesn't say anything except 404 (basically).
>         >
>         > Tomcat 3 says:
>         > ... 404 ...
>         > Original request: /myApp/web-inf/jsp/start.jsp
>         > Not found request: /myApp/web-inf/jsp/start.jsp
>         >
>         > Tomcat4 brings:
>         > Apache Tomcat/4.0.1 - HTTP Status 404 -
/web-inf/jsp/start.jsp
>         >
> --------------------------------------------------------------------
>         > ------------ type Status report
>         > message /web-inf/jsp/start.jsp
>         > description The requested resource (/web-inf/jsp/start.jsp)
is not
>         > available.
>         >
>         > The application is packed in a jar file. I checked the
contents of
>         > the file. Looks as expected (having the jsp in the
web-inf/jsp
>         > directory).
>         >
>         > It might have something to do with Win NT4, on which the
servers
>         > are running. But this is just a guess.
>         >
>         >
>         > Help greatly appreciated! Thanks for your time,
>         > Holger
>         >
>         > Please respond to [EMAIL PROTECTED]
>         >
>         >
>         >
> ____________________________________________________________________
>         > __________ Eine Klasse für sich - der WEB.DE Club. High End
>         > Kommunikation & MEHR. Mehr Speicher, mehr Leistung, mehr
Vorteile
> -
>         > http://club.web.de
>         >
>         >
>         > --
>         > To unsubscribe, e-mail:
>         > <mailto:[EMAIL PROTECTED]> For
additional
>         > commands, e-mail:
<mailto:[EMAIL PROTECTED]>
> 
>         -----BEGIN PGP SIGNATURE-----
>         Version: PGPfreeware 7.0.3 for non-commercial use
> <http://www.pgp.com>
> 
>
iQA/AwUBPB9qlrdFyYMoUAEAEQLMewCgkfflsM3qYMljDcVQHF+B8XJUlkUAn1AA
>         87cibiS9TpcAsSvAfuYxQbeg
>         =YD2M
>         -----END PGP SIGNATURE-----
> 
>         --
>         To unsubscribe, e-mail:
> <mailto:[EMAIL PROTECTED]>
>         For additional commands, e-mail:
> <mailto:[EMAIL PROTECTED]>
> 
> --
> To unsubscribe, e-mail:
<mailto:[EMAIL PROTECTED]>
> For additional commands, e-mail:
<mailto:[EMAIL PROTECTED]>

-- Ted Husted, Husted dot Com, Fairport NY USA.
-- Custom Software ~ Technical Services.
-- Tel +1 716 737-3463
-- http://www.husted.com/struts/

--
To unsubscribe, e-mail:
<mailto:[EMAIL PROTECTED]>
For additional commands, e-mail:
<mailto:[EMAIL PROTECTED]>

Reply via email to