Which statements about disabling scripting are true? (Choose all that apply)
A. You can't disable scripting via the DD. B. You can only disable scripting at the application level. C. You can disable scripting programmatically by using the isScriptingEnabled page directive attribute D. You can disable scripting via the DD by using the <scripting-invalid> element.
Answer from the book: D
My question is why isn't B also part of the answer? The DD is application level and you can ONLY disable scripting through the DD. (isScriptingEnabled page attribute is deprecated)
B. You can only disable scripting at the application level.
It's not true because you may do it via DD (declarative configuration) or via directive on the JSP page which for me is the mentioned "application level".
SCJP 5.0, SCWCD 5.0, SCBCD 5.0, SCEA/OCMJEA 5.0
Joined: Feb 05, 2008
but you can't do it via a page directive anymore. isScriptingEnabled page attribute has been removed.
What is your definition of application level? What I have as "application level" in my head is a low level such as the "application scope" or where you define your dtd before you deploy. [ August 31, 2008: Message edited by: Eurig Jones ]
Sorry, I was thinking about EL which may be enabled by page directive with a isELIgnored param. The scripting can be disabled only via DD using <scripting-invalid>. Don't know how to disable/enable it in the *.jsp code