Exam objective 2.1

[Lakshmi Saradha]

Hi,
The objective says .."Construct the file and dir structure of a web application containing static content , jsp etc.......and describe how to protect resouce files from HTTP access".
Can anybody throw light on the last line?(describe how to protect resouce files from HTTP access).

[Yi Meng]

Originally posted by Lakshmi Saradha:
Hi,
The objective says .."Construct the file and dir structure of a web application containing static content , jsp etc.......and describe how to protect resouce files from HTTP access".
Can anybody throw light on the last line?(describe how to protect resouce files from HTTP access).

To my understanding, it means that you have to put someting under the /WEB-INF/ folder so that clients cannot gain direct access to there resources, basically jsp files if/when necessary. Correct me if i am wrong....

[Vijay S. Rathore]

Absolutely right. It means you should be clear about so called 'document-root' and 'context-root' or 'app-root'

[Vipin Mohan]

Is the above point the only one regarding this objective ? Or is there anything more we need to know about protecting resource files from HTTP access ?

Thanks
Vipin