Which statement about disabling scripting elements are ture.
option b - You can only disbale scripting at application level.
Any one please explain why this option is not true.
"Know where to find the solution and how to use it - that's the secret of success."
posted 8 years ago
In <jsp-property-group> element you can use <url-pattern> tag where you specify the resources that the <scripting-invalid> tag refers to. If you put *.jsp in <url-pattern> than you disable scripting in ALL JSP's in your app, however you can ALSO apply it to one jsp page (eg. /someCat/myPage.jsp) or some pages in a certain catalogue (eg. /someCat/*).