Disabling Scripting Elements in JSP


Web tier: servlets, JSP, Web frameworks: Disabling Scripting Elements in JSP

  1. Disabling Scripting Elements in JSP (1 messages)


    Does anybody know is it possible to disable scripting elements in the JSP (they are: declaration, scriplet and expression) so only Custom JSP Tags may be used in JSP. This approach will make JSP more like a Template and prevent unauthorized scripting in the JSP.

    Thanks in advance,

  2. Hi,

    From the JSP 2.0 article found here: http://www.eweek.com/article2/0,3959,509849,00.asp

    "Both of these are big steps forward and make it possible to write significantly more complicated and feature-rich JSP pages without having to drop down to using embedded Java code. Administrators can now flag and prohibit pages that have embedded Java script, for cleaner separation of presentation JSP code from back-end business logic."