Re: Question regarding security of delivered jsp's.

[Costin Manolache <costin@tdiinc.com>]

Joe Hoffman wrote:

> How can I deliver runnable JSP's to my customers without extending them
> the ability to edit/change the JSP content?

Deliver just the generated class files ( servlets ).
Extra benefit: they will not have to configure and install JSP ( in fact
they will need just a
JRE environment  + servlet runner ). ( I do that - with an altered
JSP-servlet name mapping )

You can also alter the code generator to not generate "dependency check".

Regards,
Costin


> One suggested idea is to have a switch (I"m not sure where) that
> indicates that only generated .class files should be used, and thus not
> look for .jsp files.   Therefore I would only have to deliver the
> contents of the generated directory (apache).     Maybe there is a way
> to extend this idea somehow and just deliver a jar file that contains
> all my generated class files.
>
> Has anyone thought of this issue and are there any good/proposed
> solutions?
>
> regards
>
> joe hoffman
> Harland Corp.
> Denver, CO