permaculture playing cards
The moose likes JSF and the fly likes Primefaces inside web-inf Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Java » JSF
Bookmark "Primefaces inside web-inf" Watch "Primefaces inside web-inf" New topic

Primefaces inside web-inf

malik ge
Ranch Hand

Joined: May 13, 2011
Posts: 69
I have a simple.xhtml page inside WEB-INF folder. I am using PrimeFaces

When I run the application and go to that page, It only shows the text "This is Editor:",
But when I place the same page outside the WEB-INF folder then it show the primeface editor.

Is primefaces tags are not accessible inside WEB-INF folder?
Mark Reyes
Ranch Hand

Joined: Jul 09, 2007
Posts: 426
Pages should never be inside WEB-INF I can use a filter to protect those pages instead..
This is just what I think..

Sean Clark ---> I love this place!!!
Me ------> I definitely love this place!!!
Tim Holloway
Saloon Keeper

Joined: Jun 25, 2001
Posts: 17410

The rule is that anything you need to access by a URL cannot be places in WEB-INF, because WEB-INF and its contents are invisible as URL resources. So you can place Facelets include files under WEB-INF, since they're accessed as resources, but the top-level page resources have to be external to WEB-INF, since you use URLs to select them for JSF processing.

There are several ways to make the raw resources off-limits. If you are using standard J2EE container security, just write a security rule in WEB-INF/web.xml to block access to "*.xhtml". That will give a 403 FORBIDDEN. If you prefer a 404 NOT FOUND, you can write a small servlet, map it to "*.xhtml" and have it return a 404 response code for anything sent to it.

A servlet filter can also do the job. The main disadvantage to the filter approach is that if you make a mistake, it can have an impact on other URL requests as well as URLs ending in ".xhtml".

An IDE is no substitute for an Intelligent Developer.
I agree. Here's the link:
subject: Primefaces inside web-inf
It's not a secret anymore!