Win a copy of Clojure in Action this week in the Clojure forum!
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

forbidden access in WEB-INF dir -- where in the spec?

 
Jessica Sant
Sheriff
Posts: 4313
Android IntelliJ IDE Java
  • 0
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
I'm having a hard time finding where in the JSP 1.2 spec it says that things inside the /WEB-INF directory are not accessible by the browser.
i.e. http://somehost/myApp/WEB-INF/blah.txt --> this should return 400 error of some kind
Can someone find the section in the spec that talks about this?
Thanks
 
William Brogden
Author and all-around good cowpoke
Rancher
Posts: 13047
6
  • 0
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
I dunno about the JSP spec but it appears in the servlet 2.3 spec under "9.5 Directory Structure"
Bill
[ November 11, 2002: Message edited by: William Brogden ]
 
I agree. Here's the link: http://aspose.com/file-tools
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic