Great, that puts my mind at ease! Thanks Filip
On Wed, Sep 3, 2008 at 9:22 PM, Filip S. Adamsen <[EMAIL PROTECTED]> wrote: > Nope, that's not possible anymore. > > The reason it worked in T4 is that friendly URLs were just "aliases" for > the real Tapestry URLs. That's not how it is in T5. > > -Filip > > > On 2008-09-03 14:33, nick shaw wrote: > >> Hi >> >> I am new to Tapestry5 and I have a question about page urls: >> >> I have a page called admin/ManageContent which I access with >> http://server/context-root/admin/manageContent. >> >> I have now secured the page using Acegi so only admin users can access >> pages >> that match /admin/*, so typing the above url into my browser redirects me >> to >> the login page which is great. But is there any way a malicious user could >> could bypass the acegi filter to access the page? I know it was possible >> to >> do something like this with T4's friendlyUrls feature. >> >> Nick >> >> > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > >
