Hi Paul,

That's a very interesting point.  I didn't think about that.  But isn't it
a bad idea to hard-code your path(s) that require SSL.  What happens if a
decision is made to change the action servlet's mapping from, say *.do to
/servlet/*.  You would have to remember to change the path(s) in the
filter...  Furthermore, what if you change the name of the action that
requires SSL?  Another problem that I can think of is that all the link on
the redirected SSL page will be generated with https.

Have you written such a filter?  I'd be curious to see how you implemented
it.

Thanks.
Aladin


> IMHO, I do not think SSL switching belongs in the Struts framework. I
> think most of the time the
> correct place to put switching into SSL is in a servlet filter according
> to some predefined path.
> So if you forward from Struts to a particular location, a filter can then
> redirect it to HTTPS.
>
> Paul
>
>
>
> __________________________________
> Yahoo! Music Unlimited
> Access over 1 million songs. Try it free.
> http://music.yahoo.com/unlimited/
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to