I am new to struts..I am working over a simple struts application . and my JAVA Server pages are in different folder outside WEB-INF .when i place the page URL it opens the page on browser.Can i restrict them to open.???
please let me aware of the solution..!
A small leak can sink a Gigantic ship.>
If you can't move the JSP pages to WEB-INF directory, you can use a filter to block any requests for such JSP pages. If all those JSPs are in a particular directory like /jsp/, then you can map your filter to /jsp/* to block any request for contents of the /jsp directory. The filter will block only incoming requests and will allow request dispatching from action to the JSP...