Only 48 hours left in the trailboss' kickstarter!

New rewards and stretch goals. CLICK HERE!



  • Post Reply Bookmark Topic Watch Topic
  • New Topic

Source code for servlets  RSS feed

 
Mike Curwen
Ranch Hand
Posts: 3695
IntelliJ IDE Java Ubuntu
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi all,

Just thought I'd throw this out there to see if there were any incredulous responses..

Would it be a heinously bad idea to have the source of my servlets within the following directory: <webapp>/WEB-INF/src

You're not supposed to be able to browse WEB-INF, and if I wanted to keep my source and compiled code 'together', this would be the only 'safe' place I can think of.

Anyone have a horror story?
 
David O'Meara
Rancher
Posts: 13459
Android Eclipse IDE Ubuntu
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
I was thinking the same thing (to protect JSPs from direct access in a MVC), the only problem I can think of is that it would be likely to specific to an implementation.
If it was safe in (for example) Tomcat 1 and 2, no way of knowing if it'll work in 3 and 4 or in Weblogic...
Dave.
 
Mike Curwen
Ranch Hand
Posts: 3695
IntelliJ IDE Java Ubuntu
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
My thought on that is this:

If a vendor 'breaks' the opaqueness of WEB-INF (like iPlanet did in SP3), then customers will raise stink, and a patch will be available (like iPlanet customers did, and how iPlanet responded).

I think I'd risk it.
 
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
Boost this thread!