don't give client jsp files

[zhangj]

I have a web application,it works fine.only thing is I have to keep all of jsp file in the war directory.when we give to client,they will see the source code.is there any way only give them the compiled class file,instead give all of jsps and class files
thank you

[chudak]

Precompile all your jsp's and put them in the war instead of the jsp's.

[genman]

You can precompile your JSPs using JSPC in ant.





The web.inc is used as part of the web.xml file.

[hbaxmann]

Not precompiled JSP's could be a real security flaw. Under some circumstances the client will be able to generate his own code and send it to the container.

< %
System.exit(0)
% >

will be very funny then.

unfortunately in german: http://tomcat.objektpark.org/pdf/04_04_tomcat_JM.pdf

bax

[zhangj]

I tryed this:
made a jsp file put under default\deploy\myweb.war\myjsp.jsp
call this jsp from browser,this jsp compiled and generated class is default\work\MainEngine\localhost\myjsp_jsp.class

delete default\deploy\myweb.war\myjsp.jsp and put myjsp_jsp.class under default\deploy\myweb.war\,use jar create a myweb.war.
delete myweb.war folder and put myweb.war file under deploy,the myweb.war file is contain myjsp_jsp.class,but when I call this jsp from browser myjsp.jsp it doesn't work.
where am I wrong?

[zhangj]

any body knows?