portals-jetspeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "David Sean Taylor" <david.tay...@b3interactive.com>
Subject Servlet 2.2 Spec. and serving files from the WEB-INF directory
Date Wed, 07 Mar 2001 18:37:30 GMT
I've been trying to get Jetspeed to run with a particular vendor for quite a
while now.
I am not disclosing the name of the vendor, I replaced it below with
I assume Websphere doesn't have a problem with serving files from the
WEB-INF directory.
Agreed that it makes it nice to have one WAR file for distribution, but any
thoughts on 'breaking' the 2.2 spec?

> I've run into a possible bug in our servlet container. Jetspeed is built
> using Model 2 which involves lots of servlets, forwards, includes,
> templates and lots of other crap that pretty much makes a webapp
> unmaintainable. Most of Jetspeed's template resources, in the form of jsp
> pages, are found in its WEB-INF directory. This is where the problem comes
> in. According to the Servlet 2.2 spec section 9.4, "No file contained in
> the WEB-INF directory may be served directly to a client." So
> returns a 403 Forbidden error whenever a request is made to the container
> that results in jsp template files being requested out of the WEB-INF
> directory. Tomcat, on the other hand, does not prevent access to the
> WEB-INF directory for template files. So the question is, are we doing the
> correct thing according to the spec? Is processing a template file
> considered serving a file directly to a client?

View raw message