my dog learned polymorphism*
The moose likes Struts and the fly likes How to restrict url copy and past (Security threat) Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login

Win a copy of Murach's Java Servlets and JSP this week in the Servlets forum!
JavaRanch » Java Forums » Frameworks » Struts
Bookmark "How to restrict url copy and past (Security threat)" Watch "How to restrict url copy and past (Security threat)" New topic

How to restrict url copy and past (Security threat)

leo jacob

Joined: May 02, 2011
Posts: 17

I am working on a web application. Application is having role based access. If some one logged into this application and then copy the url and paste it to another or same browser , application is opening from there without asking for authentication. I want to restrict the same as it is a security threat for the application.
I am using struts2 framework with glassfish server.

Please let me know any way to implement restriction. Thanks in advance.
Pyla Rao
Ranch Hand

Joined: Jul 10, 2012
Posts: 50
The scenario explained by you ,its under comes in web security-authorization. you need to implements security constraints in web.xml files for roles.
Before writing code we need to understand web security of java ee web application.

here the best tutorials for that :
I agree. Here's the link:
subject: How to restrict url copy and past (Security threat)
Similar Threads
How to remove JSESSIONID cookie on session invalidation
getContext(uri) in Tomcat
URL rewriting
always only ONE session ?
How to stop unauthorized access of the Application?