I have develop web application in JSP in JDeveloper. I can create war file but i want to create jar file using ant or JDeveloper. Can any body help me?
Actually when i deploy war file, it consist of source code of jsp page. I want to deploy application without source code of jsp page.
Ulf Dittmer
Marshal
Joined: Mar 22, 2005
Posts: 35429
9
posted
0
Why?
ehsan ulhaq dar
Greenhorn
Joined: Jun 04, 2008
Posts: 17
posted
0
simple to hide my logic and no one can take source code.
Ulf Dittmer
Marshal
Joined: Mar 22, 2005
Posts: 35429
9
posted
0
How would anyone get access to the JSP files that are running on a server? Do you have reason to mistrust the server's system administrators?
Also, JSPs should not contain any business logic at all - that is part of the Java source code which is not part of the web app to begin with. The class files are part of the web app, or course, and they can be decompiled, but again - the attacker would have to have access to the server's file system.
ehsan ulhaq dar
Greenhorn
Joined: Jun 04, 2008
Posts: 17
posted
0
Actually the person who deployed that application had deployed it through jar file, he just compile the jsp page and make jar file of .class pages . Now i enhance some pages of in this old application in which jsp pages contain most of business logic, and i have to send new release. Hope you understand now.
Ulf Dittmer
Marshal
Joined: Mar 22, 2005
Posts: 35429
9
posted
0
I understand what you're trying to do - I'm just questioning the reasons for doing it, which seem not to be all that good.
Tomcat ships with an Ant task for pre-compiling JSP pages that you could use. Other servlet containers may have similar facilities.
ehsan ulhaq dar
Greenhorn
Joined: Jun 04, 2008
Posts: 17
posted
0
May be they did it because they didn't trust administrator. Can you tell me exactly how that could be done.
Well as you said of JDeveloper, here is another perspective, are you using Oracle ADF in your project?
If so, an adf web project can be packed in a JAR which is entirely different case and what all other ranchers are saying here.
Basically, adf allows you to pack web project into a jar including jsp/jspx,images etc and refer these components within another web project after including this jar in it.
But of course once your supposed attacker has access to the server's file system, putting the application into a jar is worth exactly nothing. Once the attacker has the jar file, it takes just seconds to extract all of its contents.
ehsan ulhaq dar
Greenhorn
Joined: Jun 04, 2008
Posts: 17
posted
0
No i don't use ADF, i just use simple jsp pages as i said the project i am working is old and i just enhance some feature on it.