Friday, 3 September 2004

blojsom dispatcher API

In blojsom we can support any presentation technology by writing an implementation of the BlojsomDispatcher interface. Available dispatchers in either the core blojsom download or the add-on bundle (links to blojsom documentation for each dispatcher): JavaServer Pages (JSP), Velocity, FreeMarker, and Groovy.

Choice is good!
Posted by david at 3:57 PM in blojsom ... all blojsom

Disabling JSP compilation under Tomcat

As Dave and Simon noted, if you're writing a web application where individuals have the ability to push content to the server, disabling JSP compilation may be a good idea. In your $TOMCAT_HOME/conf/ directory, modify the web.xml as follows:
  1. For the default servlet, change the "listings" init-param to false. If someone does start exploring your site, at least they won't be able to retrieve a listing of files they might want to see if they can execute.
  2. Comment out the servlet definition block for the jsp servlet. This is the servlet mapped to .jsp and .jspx in this file.
  3. Comment out the servlet mapping block for the .jsp and .jspx URL patterns.
  4. If you do allow file uploads, you might not want to allow .jsp, .jspx, or other JSP-executable extensions if the files are uploaded to an area of the server where they can be retrieved via URL.
That should just about do it. Unfortunately it's not point-and-click, but it does work.
Posted by david at 1:51 PM in java ... just java
« First  « Prev   1 2 3 4 5   Next »  Last »
« September »
SunMonTueWedThuFriSat
   1234
567891011
12131415161718
19202122232425
2627282930