Why put JSP in WEB-INF?

by

Files in WEB-INF are not visible to the users. It’s a bit safer that way.

If (a contrived example) you are including db.jsp, but by itself it throws an exception, a malicious user can open http://yoursite.com/db.jsp and get some insight on your application (worst – the database credentials) from the exception message.

More Related Contents:

  1. How to open a Project in NetBeans
  2. How to loop through a HashMap in JSP?
  3. JSP tricks to make templating easier?
  4. How can I avoid Java code in JSP files, using JSP 2?
  5. ResultSet to Pagination
  6. Java error: Only a type can be imported. XYZ resolves to a package
  7. why business logic should be moved out of JSP?
  8. Struts 2 : There is no Action mapped for namespace [/]
  9. Sharing session data between contexts in Tomcat
  10. How to do if-else in Thymeleaf?
  11. Execute JSP directly from Java
  12. How can I escape special HTML characters in JSP?
  13. What is the difference between and ? [duplicate]
  14. Retrieving servlet context, session and request in a POJO outside container
  15. IntelliJ and JSP/JSTL cannot resolve taglib for JSTL in tomcat7 [duplicate]
  16. How to resolve : Can not find the tag library descriptor for “http://java.sun.com/jsp/jstl/core” [duplicate]
  17. UTF-8 encoding in JSP page [duplicate]
  18. How do I include a JSP file from a different project into my project
  19. The superclass “javax.servlet.http.HttpServlet” was not found on the Java Build Path [duplicate]
  20. Is there a way to redirect to another Action class without using on struts.xml
  21. Displaying pdf in jsp
  22. How to pass a value from one jsp to another jsp page?
  23. JSP : JSTL’s tag
  24. Can not find the tag library descriptor of springframework
  25. Resultset To List
  26. Struts 2 dynamic variables
  27. Populating one select menu based on another select menu using AJAX in Struts2
  28. JSTL iterate over list of objects
  29. How to URL encode a URL in JSP / JSTL?
  30. How to check a boolean condition in EL?

Leave a Comment