Discussions

Web tier: servlets, JSP, Web frameworks: Deny access to a certain JSP

Bookmark and Share Get thread feed

  1. Deny access to a certain JSP (2 messages)

    hi,
    how can one deny access to a certain JSP directly from a web browser? i don't want users to be able to access a JSP by typing its URL in their browser.

    thanks
    Reply to this

    Threaded Messages (2)

  2. Deny access to a certain JSP[ Go to top ]

    hi,

    > how can one deny access to a certain JSP directly from a web browser? i don't want users to be able to access a JSP by typing its URL in their browser.
    >
    > thanks

    place the jsp pages under the WEB-INF directory then map some urls to the jsp pages
    Reply to this Reply to original

  3. Deny access to a certain JSP[ Go to top ]

    You can avoid all issues if your users do not know the URLs to your JSPs as it was mentioned in the previous response.

    Otherwise you can use javascript to disable the Address bar upon access your app but this can easily be overcomed if the user really wan't to access the JSPs directly.

    Finally, if you are concerned about security, you can secure access to certain pages or access paths using JAAS or J2EE Application Security if your server supports it.

    Mathieu
    Reply to this Reply to original