Question? What is the point of putting jsp pages in web-inf?
Someone please correct me if I am wrong but, If I see a web application URL such as http://www.someweb.com/myapp/web-inf/somedir/mypage.jsp then I can only assume that I can also go to http://www.someweb.com/myapp/web-inf/web.xml or http://www.someweb.com/myapp/web-inf/classes/ (god forbid that you have "directory browsing" enabled, then I could read your database connection login and passwords (if avaialable, such as poolman.xml) or any of your resource bundle files. Or worse, I could download your .class and .jar files. P.S. Did you actually click on those links? They won't work because I made them up:-) James Mitchell Software Engineer Open-Tools.org Home Phone (770) 822-3359 Cell Phone: (678) 910-8017 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Friday, February 15, 2002 10:04 AM To: Struts Users Mailing List Subject: <no subject> depends on where your pages are. If you have them in the root web app dir, use: <frameset> <frame src="myNavigation.jsp"> <frame src="myContent.jsp"> </frameset> If you have it , let's say under <root>/myjsps, use: <frameset> <frame src="myjsps/myNavigation.jsp"> <frame src="myjsps/myContent.jsp"> </frameset> Having the jsps under WEB-INF doesn't work on some servers WL, for instance. From: Henry Lu Subject: Re: frame page src=? Date: Fri, 15 Feb 2002 05:59:28 -0800 ---------------------------------------------------------------------------- ---- No it doesn't work either. Could you show me a working examples? --------------------------------------------------------------------------- Henry Lu MCIT phone: (734) 936-2063 University of Michigan Medical Center fax: (734) 763-4372 On Fri, 15 Feb 2002, Jin Bal wrote: > how about > src=something.do > ----- Original Message ----- > From: "Henry Lu" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Friday, February 15, 2002 1:34 PM > Subject: frame page src=? > > > > How to specify src path in the frame tag under struts? > > > > I did the following and it didn't work > > > > src="/WEB-INF/jsp/login/blank.jsp" > > neither > > src="/do/someting" > > neither > > src="/jsp/login/blank.jsp" > > > > Could you show me an example? > > > > > > -------------------------------------------------------------------------- > - > > Henry Lu > > MCIT phone: (734) 936-2063 > > University of Michigan Medical Center fax: (734) 763-4372 > > > > > > -- > > To unsubscribe, e-mail: > <mailto:[EMAIL PROTECTED]> > > For additional commands, e-mail: > <mailto:[EMAIL PROTECTED]> > > > > > > -- > To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> > For additional commands, e-mail: <mailto:[EMAIL PROTECTED]> > -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]> ____________________________________________________________________________ __ Seien Sie dabei und sichern Sie sich 100% Leistung, 100% Prämie und 100% Zufriedenheit. Jetzt unter http://club.web.de/?mc=021105 -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]> _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
