struts-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Keith Chew" <keith.c...@jungledrum.co.nz>
Subject RE: changing from *.do to /do/* screws up everything?
Date Wed, 27 Feb 2002 22:28:11 GMT

No, that was not what I was looking for.

In Apache, you can use the Location tag to filter out http requests, eg:

  <Location /*.jsp>
    Deny from all
  </Location>

I want to filter out all JSPs including subfolders. Any thoughts?

I just read the documentation and it says you use LocationMatch and pass it
a regular expression, eg

   <LocationMatch "/(extra|special)/data">

would match URLs that contained the substring "/extra/data" or
"/special/data".

I want something like:

   <LocationMatch "/**/*.jsp">

Is this the correct format of a regular expression? I will give this a go...

Keith


-----Original Message-----
From: Matt Raible [mailto:matt_raible@yahoo.com]
Sent: Thursday, 28 February 2002 11:16 a.m.
To: Struts Users Mailing List
Subject: RE: changing from *.do to /do/* screws up everything?


The *easiest" way to do this is to use a DefaultAction that can be used to
forward to JSPs, and actions-mappings for everything else.

Then protect /do/* request your JSPs with /do/name.jsp and it'll go through
DefaultAction (search this list for more info), and having your welcome as
/index.jsp (notice no /do/)

Is this what you're looking for?

Matt

--- Keith Chew <keith.chew@jungledrum.co.nz> wrote:
>
> Yes, I have the question. For example, I want to block all JSPs includeing
> subfolders, eg
>
> /index.jsp
> /subfolder/1.jsp
>
> can I go something like **/*.jsp (similar to Ant)?
>
> Keith
>
>
> -----Original Message-----
> From: Dave J Dandeneau [mailto:Dave.Dandeneau@viant.com]
> Sent: Thursday, 28 February 2002 10:59 a.m.
> To: Struts Users Mailing List
> Subject: RE: changing from *.do to /do/* screws up everything?
>
>
> Can url-patterns be when more complicated than *.jsp when restricting
access
> to pages. I have used *.jsp and *.do, but can you add more complex
> expressions? What syntax do you use when adding these? In example, what
> might be the syntax to restrict all pages but a login page? or maybe the
> index page? maybe something like ((*.jsp) && !(index.jsp))?
>
> Thanks,
> dave
>
> -----Original Message-----
> From: Robert [mailto:rmcintosh@bull-enterprises.com]
> Sent: Wednesday, February 27, 2002 3:51 PM
> To: 'Struts Users Mailing List'
> Subject: RE: changing from *.do to /do/* screws up everything?
>
>
> Figures. Then I suppose you could have an index.jsp and deny all other
> .jsps... Or maybe have the index page do a redirect to the index.do.
> Maybe not as clean or elegant, but would work.
>
>
>
> -----Original Message-----
> From: Joco Guilherme Del Valle [mailto:joao@visionnaire.com.br]
> Sent: Wednesday, February 27, 2002 2:44 PM
> To: Struts Users Mailing List
> Subject: Re: changing from *.do to /do/* screws up everything?
>
> I don4t know about the spec, but at least Tomcat *does not* accept this
> solution. I haven4t tried with a servlet, but an action doesn4t work.
> Maybe
> because the name of the tag in web.xml is welcome-file-list, it4s must
> be
> either a tag that accepts only files or a semantic problem in the spec.
>
>
>  Joao Guilherme Del Valle
>  joao@visionnaire.com.br
>  Visionnaire Informatica SA
>  http://www.visionnaire.com.br
>  Tel/Fax: +55 41 373-7400 r: 221
>  Curitiba / PR / Brasil
> ----- Original Message -----
> From: "Robert" <rmcintosh@bull-enterprises.com>
> To: "'Struts Users Mailing List'" <struts-user@jakarta.apache.org>
> Sent: Wednesday, February 27, 2002 5:36 PM
> Subject: RE: changing from *.do to /do/* screws up everything?
>
>
> > You could set up index.do as a 'welcome page'; but then it would
> depend
> > on if the server would try to load this as a 'page' or via a URL which
> > Struts would then pickup and handle.
> >
> > Not sure if that would work, but that's a though.
> >
> > Robert
> >
> > -----Original Message-----
> > From: Eddie Bush [mailto:ekbush@swbell.net]
> > Sent: Wednesday, February 27, 2002 2:26 PM
> > To: Struts Users Mailing List
> > Subject: Re: changing from *.do to /do/* screws up everything?
> >
> > Yes, but will that not demand that your index page be a HTML file
> rather
> > than JSP?  If you have an index page that has dynamic pieces as well
> as
> > static ones - or uses, say, templates (struts templates that is),
> you've
> > just shot yourself in the foot, haven't you?
> >
> > Additional Thoughts,
> >
> > Eddie
> >
> > ----- Original Message -----
> > From: "Keith Chew" <keith.chew@jungledrum.co.nz>
> > To: "Struts Users Mailing List" <struts-user@jakarta.apache.org>
> > Sent: Wednesday, February 27, 2002 2:21 PM
> > Subject: RE: changing from *.do to /do/* screws up everything?
> >
> >
> > >
> > > An alternative to putting it in the WEB-INF is to use Apache to
> filter
> > the
> > > request, eg:
> > >
> > >   <Location /*.jsp>
> > >     Deny from all
> > >   </Location>
> > >
> > > This has the advantage of:
> > > - if you decide not to disallow JSPs, you can
> > > - when you are developing, it's often handy to view the JSPs without
> > going
> > > through the actions first (eg want to see if your table looks ok)
> > >
> > > Some thoughts
> > > Keith
> > >
> > > -----Original Message-----
> > > From: Eddie Bush [mailto:ekbush@swbell.net]
> > > Sent: Thursday, 28 February 2002 7:44 a.m.
> > > To: Struts Users Mailing List
> > > Subject: Re: changing from *.do to /do/* screws up everything?
> > >
> > >
> > > Ok, silly question time.  Why would you want to put your pages under
> > > WEB-INF?  Honestly, I don't see why you would, but ... I'm hardly a
> > 'guru'.
> > >
> > > Thanks,
> > >
> > > Eddie
> > >
> > > ----- Original Message -----
> > > From: "Rob Breeds" <Rob_Breeds@uk.ibm.com>
> > > To: "Struts Users Mailing List" <struts-user@jakarta.apache.org>
> > > Sent: Wednesday, February 27, 2002 11:58 AM
> > > Subject: Re: changing from *.do to /do/* screws up everything?
> > >
> > >
> > > >
> > > > Thanks for suggestion but I can't use <html:base> because all my
> > JSPs
> > are
> > > > under WEB-INF\pages
> > > >
> > > > Putting <html:base/> in will cause images (and any relative urls)
> to
> > have
> > > > URLs of
> > > > <img src="WEB-INF/pages/images/find_obj.gif">
> > > >
> > > > which is even worse (doesn't work at all) and defeats the point of
> > putting
> > > > pages under WEB-INF!
> > > >
> > > >
> > > > Rob
> > > >
> > > >
> > > >
> > > >
> > > > |--------+------------------------->
> > > > |        |          Bryan          |
> > > > |        |          Field-Elliot   |
> > > > |        |          <bryan_lists@ne|
> > > > |        |          tmeme.org>     |
> > > > |        |                         |
> > > > |        |          27/02/2002     |
> > > > |        |          17:49          |
> > > > |        |          Please respond |
> > > > |        |          to "Struts     |
> > > > |        |          Users Mailing  |
> > > > |        |          List"          |
> > > > |        |                         |
> > > > |--------+------------------------->
> > > >
> > >
> >
> >-----------------------------------------------------------------------
> > ----
> > > --------------------------------------------|
> > > >   |
> > > |
> > > >   |      To:     Struts Users Mailing List
> > > <struts-user@jakarta.apache.org>
> > > |
> > > >   |      cc:
> > > |
> > > >   |      Subject:     Re: changing from *.do to /do/* screws up
> > > everything?                                               |
> > > >   |
> > > |
> > > >   |
> > > |
> > > >
> > >
> >
> >-----------------------------------------------------------------------
> > ----
> > > --------------------------------------------|
> > > >
> > > >
> > > >
> > > >
> > > > Put this inside the <head> block of all your JSP pages:
> > > >
> > > > <html:base/>
> > > >
> > > > Here is a URL to the docs for this tag:
> > > >
> > > > http://jakarta.apache.org/struts/doc-1.0.2/struts-html.html#base
> > > >
> > > > It solves exactly this problem.
> > > >
> > > > Bryan
> > > >
> > > > On Wed, 2002-02-27 at 10:39, Rob Breeds wrote:
> > > > > Hi
> > > > >
> > > > > I hope this is me being dumb but I have a working Struts
> > application
> > > that
> > > > > uses a *.do servlet mapping for ActionServlet
> > > > >
> > > > > Because I found that the servlet spec doesn't allow partial URL
> > mappings
> > > > > for security (eg. I can't specify a url-mapping of '/pub*'), I
> > must
> > now
> > > > > change my app to use /do/*
> > > > >
> > > > > Seems like a fine idea, and Ted says its cool :)
> > > > >
> > > > > So, I changed the servlet mapping to '/do/*' and references to
> > '*.do'
> > in
> > > > my
> > > > > JSPs.
> > > > >
> > > > > Now my app sort of works but all relative links are now broken -
> > CSS,
> > > > > images, JavaScript files
> > > > >
> > > > > e.g. I have a URL of '<rest of path>/do/header' and this is
> > specified
> > in
> > > > > the config  file as:
> > > > >
> > > > >           <action path="/header"
> > forward="/WEB-INF/pages/header.jsp"/>
> > > > >
> > > > > The page loads OK but the JSP references images like this:
> > > > >
> > > > > <img src="images/find_obj.gif">
> > > > >
> > > > > This used to work because images was a directory directly under
> > the
> > war
> > > > > directory, but now, the image has a path of <img src
> > > > > ="/do/images/find_obj.gif"> which isn't found. Simarly for
> > references
> > to
> > > > > CSS files and JS files.
> > > > >
> > > > > why is the /do/ prefix being added?
> > > > >
> > > > >
> > > > > Please could anyone tell me what I have to do to get my JS, CSS
> > and
> > > > images
> > > > > to load without changing every reference  to them in every JSP
> to
> > > include
> > > > a
> > > > > /do/?
> > > > >
> > > > > Thanks
> > > > >
> > > > > Rob
> > > > >
> > > > >
> > > > >
> > > > > --
> > > > > To unsubscribe, e-mail:   <
> > > > mailto:struts-user-unsubscribe@jakarta.apache.org>
> > > > > For additional commands, e-mail: <
> > > > mailto:struts-user-help@jakarta.apache.org>
> > > >
> > > >
> > > >
> > > > --
> > > > To unsubscribe, e-mail:   <
> > > > mailto:struts-user-unsubscribe@jakarta.apache.org>
> > > > For additional commands, e-mail: <
> > > > mailto:struts-user-help@jakarta.apache.org>
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > --
> > > > To unsubscribe, e-mail:
> > > <mailto:struts-user-unsubscribe@jakarta.apache.org>
> > > > For additional commands, e-mail:
> > > <mailto:struts-user-help@jakarta.apache.org>
> > > >
> > >
> > >
> > > --
> > > To unsubscribe, e-mail:
> > > <mailto:struts-user-unsubscribe@jakarta.apache.org>
> > > For additional commands, e-mail:
> > > <mailto:struts-user-help@jakarta.apache.org>
> > >
> > >
> > > --
> > > To unsubscribe, e-mail:
> > <mailto:struts-user-unsubscribe@jakarta.apache.org>
> > > For additional commands, e-mail:
> > <mailto:struts-user-help@jakarta.apache.org>
> > >
> >
> >
> > --
> > To unsubscribe, e-mail:
> > <mailto:struts-user-unsubscribe@jakarta.apache.org>
> > For additional commands, e-mail:
> > <mailto:struts-user-help@jakarta.apache.org>
> >
> >
> >
> > --
> > To unsubscribe, e-mail:
> <mailto:struts-user-unsubscribe@jakarta.apache.org>
> > For additional commands, e-mail:
> <mailto:struts-user-help@jakarta.apache.org>
>
>
> --
> To unsubscribe, e-mail:
> <mailto:struts-user-unsubscribe@jakarta.apache.org>
> For additional commands, e-mail:
> <mailto:struts-user-help@jakarta.apache.org>
>
>
>
> --
> To unsubscribe, e-mail:
> <mailto:struts-user-unsubscribe@jakarta.apache.org>
> For additional commands, e-mail:
> <mailto:struts-user-help@jakarta.apache.org>
>
>
> --
> To unsubscribe, e-mail:
> <mailto:struts-user-unsubscribe@jakarta.apache.org>
> For additional commands, e-mail:
> <mailto:struts-user-help@jakarta.apache.org>
>
>
> --
> To unsubscribe, e-mail:
<mailto:struts-user-unsubscribe@jakarta.apache.org>
> For additional commands, e-mail:
<mailto:struts-user-help@jakarta.apache.org>
>


__________________________________________________
Do You Yahoo!?
Yahoo! Greetings - Send FREE e-cards for every occasion!
http://greetings.yahoo.com

--
To unsubscribe, e-mail:
<mailto:struts-user-unsubscribe@jakarta.apache.org>
For additional commands, e-mail:
<mailto:struts-user-help@jakarta.apache.org>


--
To unsubscribe, e-mail:   <mailto:struts-user-unsubscribe@jakarta.apache.org>
For additional commands, e-mail: <mailto:struts-user-help@jakarta.apache.org>


Mime
View raw message