HFSJ First Edition - Being a JSP - Mock Exam Question 13

[Sai Surya]

Dear All,

Q: Which statements about disabling scripting elements are true? (Choose all the apply.)

A. You can't disable scripting via the DD.
B. You can only disable scripting at the application level.
C. You can disable scripting programatically by using the isScriptingEnabled page directive attribute.
D. You can disable scripting via the DD by using the <scripting-invalid> element.

I answered BD. But the correct answer as per the book is only D.

I don't understand why answer B is not correct . Giving <scripting-invalid> in the DD disables scripting
for all the JSP's matching a particular URL pattern which is for the whole application. So we can only disable
scripting at the application level and NOT at individual JSP level.

Please correct me if I am wrong.

[Chinmaya Chowdary]

Hi Sai.

B. You can only disable scripting at the application level.

What you have explained above is true for application level. We can also disable scripting for individual jsp through DD. Here the question has mentioned the word 'only', I think this caused option B not correct.

[Sai Surya]

Chinmaya Chowdary wrote: We can also disable scripting for individual jsp through DD.

Thanks for reply Chinmaya and it makes sense now, however how do we disable scripting for individual JSP through DD? Do we give the exact URL of the JSP in the <url-pattern>?

[Balu Sadhasivam]

Do we give the exact URL of the JSP in the <url-pattern>?

Yes , BTW there is no such thing as "isScriptingEnabled" , its was just in draft which dint make it to the final release.