Accessing WEB-INF

Hello,
As a follow-up to a previous thread (http://newsgroups.bea.com/cgi-bin/dnewsweb?cmd=article&group=weblogic.developer.interest.webservices&item=3198&utag=)
Can a java class web service figure out where the WEB-INF directory is located?
I am looking for a known location to put a property file, but do not know the
path to where the web service has been deployed.
Thanks,
Sam

Probably the best thing to do is
getClass().getClassLoader().getResourceAsStream("/myprops.txt");
You can put your props file in WEB-INF/classes/myprops.txt
-- Rob
Sam Cho wrote:
Hello,
As a follow-up to a previous thread (http://newsgroups.bea.com/cgi-bin/dnewsweb?cmd=article&group=weblogic.developer.interest.webservices&item=3198&utag=)
Can a java class web service figure out where the WEB-INF directory is located?
I am looking for a known location to put a property file, but do not know the
path to where the web service has been deployed.
Thanks,
Sam

Similar Messages

How can I access WEB-INF/lib

Hello all,
I deployed JClient application using Java Web Start.
I have the following lines in jnlp file
<resource>
<jar href="WEB-INF/lib/share.jar" />
</resource>
There's actually share.jar under WEB-INF/lib directory,
but I got error message when execute the application.
It seems that I can't access files under WEB-INF via http.
Does anybody know why?
Thanks in advance.

Sorry for being picky on this. Oracle is not doing it, it is the software you're using, ie JDeveloper in your case.
AFAIK, the Servlet spec states that every library that is needed by the Servlet application should be put under WEB-INF/lib. These libraries are not accessible for any other usage.
JDev is doing this because your web application needs it.
If your JNLP application needs it too, JDev should be smart enough to include it twice in your WAR file, once for your web application and once for your JNLP application.
On the other hand I really hate software that is too smart and causes more problem by being smart than everything else.
Having said that, please file an enhancement request on Metalink for JDev for better library management for JNLP applications.
--olaf

Security Bug?? Accessing WEB-INF/web.xml from a URL

I can access http://localhost/NASApp/myApp/WEB-INF/web.xml (or any other
files in WEB-INF) from my browser! This can't be right. How do I turn this
off?
Hopefully, I can do this in the appserver, but if not, please tell me how to
do it in the webserver. I am using iWS 4.1 & iWS 6.0 on 2 different
machines.
Thanks,
Matt

This is known bug previously discussed in the following thread (search
in the newsgroup mcom.ias):
!!From - Fri Aug 31 08:12:02 2001
!!From: [email protected] (David Ogren)
!!Newsgroups: mcom.ias
!!Subject: Can someone cross-check this sp3 security concern
Matt Raible wrote:
I can access http://localhost/NASApp/myApp/WEB-INF/web.xml (or any other
files in WEB-INF) from my browser! This can't be right. How do I turn this
off?
Hopefully, I can do this in the appserver, but if not, please tell me how to
do it in the webserver. I am using iWS 4.1 & iWS 6.0 on 2 different
machines.
Thanks,
Matt

Help with accessing WEB-INF/lib files

Hi,
sorry posted already in webserver ngrp... but need suggestions anywhere
I have an application with following structure.
First
|
| ----- LookupForm.java (servlet)
|
| -----WEB-INF
|
|-----classes(dir)
|
| ----lib
| |
| |---a1.jar
|
|------ web.xml
the servlet classes are included in the classpath. But I want the servlet to use the a1.jar also.
I have been looking at the examples with WLS6.1. I have set the environment same as examples environment, ofcourse with the directories changed accordingly.
I usually compile the servlet like this
javac -d %EX_WEBAPP_CLASSES% myServlet.java
using this the servlet is compiled and class file is copied to mydomain/applications/DefaultWebapp/WEB-INF/classes dir.
so do to the same and using the a1.jar, how should I put in at the command prompt.
I hope I am clear with explaining the problem.
Any ideas are really appreciated.
TIA
Rama
[att1.html]

Hi Rama,
You may want to look at the ANT build tool available at
http://ant.apache.org
It will allow you to automate your build process so that you won't need to
do
manual compilation/assebly/deployment for the application.
Regards,
Slava Imeshev
"rama" <[email protected]> wrote in message
news:3e657d08$[email protected]..
Hi,
sorry posted already in webserver ngrp... but need suggestions anywhere
I have an application with following structure.
First
|
| ----- LookupForm.java (servlet)
|
| -----WEB-INF
|
|-----classes(dir)
|
| ----lib
| |
| |---a1.jar
|
|------ web.xml
the servlet classes are included in the classpath. But I want the servlet
to use the a1.jar also.
I have been looking at the examples with WLS6.1. I have set the environment
same as examples environment, ofcourse with the directories changed
accordingly.
I usually compile the servlet like this
javac -d %EX_WEBAPP_CLASSES% myServlet.java
using this the servlet is compiled and class file is copied to
mydomain/applications/DefaultWebapp/WEB-INF/classes dir.
so do to the same and using the a1.jar, how should I put in at the command
prompt.
I hope I am clear with explaining the problem.
Any ideas are really appreciated.
TIA
Rama

WL 5.1 war: can't access WEB-INF/lib jars

          I'm trying to deploy a war file that uses Struts on wl5.1. The problem I am having
          is that the servlets are unable to find classes from jars in the war file. If
          I put the jars in the weblogic classpath, it works, but I'd rather not do that.
          This war file works on Tomcat, but it doesn't seem to be working on wl5.1. Oddly,
          while deploying, the server finds the servlet class itself from one of the jars,
          but then can't find the other classes the servlet class references, even though
          they are in the same jar.
          I've verified that the servlet class is not in the server classpath. I've found
          a number of posts about this problem in this newsgroup (though generally for later
          versions of the appserver), but none of them solved my problem.
          If anyone can recollect Weblogic 5.1, I'd appreciate your help.
          Thanks.
          Rex


Glen,
You said:
IE browser just gives me the 500 error without
additional elaborationTry unsetting the "Show friendly HTTP error
messages".
From the "Tools" menu of Microsoft Internet Explorer,
choose "Internet Options".
(You should then see another window entitled
"Internet Properties" displayed.)
Select the "Advanced" tab and search for "Show
friendly HTTP error messages".
Excellent--that worked. Thanks! I was afraid that I would have to be debugging on Firefox exclusively.
I also suggest setting the
"search-local-classes-first" attribute, of the
"web-app-class-loader" element, in your
"orion-web.xml" file to 'true' (if it isn't
already).
That did it. My orion-web.xml file was of the old DTD-based version, I believe that was causing the problem.
The following document:
Oracle® Containers for J2EE
Developers Guide
10g Release 3 (10.1.3)
Part No. B14433-01
has a chapter (3) entitled Utilizing the OC4J
Class Loading Framework which contains a section
entitled Troubleshooting Class Loading-Related
Problems in OC4J.
Thanks for the link, I went through it thoroughly in trying to fix my problem.
Glen

How can JSP pages be in WEB-INF?

Hi, I read in a tutorial that anything in the WEB-INF folder is basically private to the outside world, meaning they cannot access it.
I also read that JSP pages should be kept in the main folder of your application and any subfolders, but out of WEB-INF (which is for libraries, classes, and xml files).
However, another tutorial has instructed me to put some JSP pages in the main application folder, and some results JSP pages in a subfolder of WEB-INF, and it still works!
How is that so? The WEB-INF JSP pages are being accessed through a forward tag in my struts-config.xml file.

users can't directly access WEB-INF, but your app can.
just change the URL to point to the protected JSPs
%

Error while accessing a war with xmlbeans under WEB-INF/lib

Hi All,
I am trying to deploy a WAR file with XMLBean generated jar under WEB-INF/lib folder along with other jars.
I am getting following error
java.lang.NoClassDefFoundError: com/xx/DataServiceRequestDocument
     at java.lang.Class.getDeclaredFields0(Native Method)
     at java.lang.Class.privateGetDeclaredFields(Class.java:2291)
     at java.lang.Class.getDeclaredField(Class.java:1880)
     at java.io.ObjectStreamClass.getDeclaredSUID(ObjectStreamClass.java:1610)
     at java.io.ObjectStreamClass.access$700(ObjectStreamClass.java:52)
     at java.io.ObjectStreamClass$2.run(ObjectStreamClass.java:425)
     at java.io.ObjectStreamClass.<init>(ObjectStreamClass.java:413)
     at java.io.ObjectStreamClass.lookup0(ObjectStreamClass.java:310)
     at java.io.ObjectStreamClass.lookup(ObjectStreamClass.java)
     at java.io.ObjectStreamClass.initNonProxy(ObjectStreamClass.java:547)
     at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1582)
     at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1495)
     at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1731)
     at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1328)
     at java.io.ObjectInputStream.readObject(ObjectInputStream.java:350)
     at com.tangosol.util.ExternalizableHelper.readSerializable(ExternalizableHelper.java:2216)
     at com.tangosol.util.ExternalizableHelper.readObjectInternal(ExternalizableHelper.java:2347)
     at com.tangosol.util.ExternalizableHelper.readObject(ExternalizableHelper.java:2290)
     at com.tangosol.io.DefaultSerializer.deserialize(DefaultSerializer.java:74)
     at com.tangosol.coherence.component.net.extend.Channel.deserialize(Channel.CDB:15)
     at com.tangosol.io.pof.PofBufferReader.readAsObject(PofBufferReader.java:3306)
     at com.tangosol.io.pof.PofBufferReader.readObject(PofBufferReader.java:2603)
     at com.tangosol.coherence.component.net.extend.messageFactory.InvocationServiceFactory$InvocationRequest.readExternal(InvocationServiceFactory.CDB:5)
     at com.tangosol.coherence.component.net.extend.Codec.decode(Codec.CDB:29)
     at com.tangosol.coherence.component.util.daemon.queueProcessor.service.Peer.decodeMessage(Peer.CDB:25)
     at com.tangosol.coherence.component.util.daemon.queueProcessor.service.Peer.onNotify(Peer.CDB:54)
     at com.tangosol.coherence.component.util.Daemon.run(Daemon.CDB:42)
     at java.lang.Thread.run(Thread.java:662)
I tried multiple combinations like changing, but no success.
<wls:weblogic-web-app xmlns:wls="http://xmlns.oracle.com/weblogic/weblogic-web-app" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd http://xmlns.oracle.com/weblogic/weblogic-web-app http://xmlns.oracle.com/weblogic/weblogic-web-app/1.0/weblogic-web-app.xsd">
<wls:weblogic-version>10.3.2</wls:weblogic-version>
<wls:context-root>CoherenceWS</wls:context-root>
<wls:container-descriptor>
<wls:prefer-web-inf-classes>true</wls:prefer-web-inf-classes>
</wls:container-descriptor>
</wls:weblogic-web-app>
I have very few classes in WEB-INF/class (trying to load java objects from lib)
My WEB-INF/lib folder contains following jar
coherence.jar
commons-beanutils-1.8.0.jar
commons-collections-3.2.jar
commons-lang-2.4.jar
commons-logging-1.1.1.jar
dsRemoteCall.jar
ezmorph-1.0.jar
jackson-all-1.8.5.jar
json-lib-2.1-jdk13.jar
org.springframework.asm-3.1.0.M2.jar
org.springframework.beans-3.1.0.M2.jar
org.springframework.context-3.1.0.M2.jar
org.springframework.core-3.1.0.M2.jar
org.springframework.expression-3.1.0.M2.jar
org.springframework.oxm-3.1.0.M2.jar
org.springframework.web-3.1.0.M2.jar
org.springframework.web.servlet-3.1.0.M2.jar
schemaclasses.jar
xbean.jar
xom-1.2.7.jar
Am I missing something? Any help is greatly appreciated
Thanks
sunder
Edited by: 868704 on Sep 6, 2011 6:10 PM

Note : schemaclasses.jar contains "com/xx/DataServiceRequestDocument" class file.
WebLogic Server 10.3.5.0
Thanks
sunder
Edited by: 868704 on Sep 6, 2011 6:26 PM

Visual Web JSF web app unable to render. The theme tries to access META-INF

Hi,
BACKGROUND: I have created a Netbeans 6 Visual Web Project using the default Visual Web JSF Theme. My web application can be viewed properly and correctly when i deploy it on tomcat 6.
ARCHITECTURE: Our server configuration requires IIS to be our web server and tomcat to be our app server. Both are running on different machines. I have successfully linked up IIS 6 and tomcat 6 using the JK isapi_redirector.
PROBLEM: However, when i connect to my app via IIS, my starting page opens but the input box components on that page are not displayed and i get several javascript errors that read - 'dojo is undefined' and 'webui is undefined'.
PROBLEM DETAILS: I found that the page being served had a lot of files being requested from a META-INF folder. I have attached a snippet here.
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:wairole="http://www.w3.org/2005/01/wai-rdf/GUIRoleTaxonomy#" xmlns:waistate="http://www.w3.org/2005/07/aaa">
<head>
<title></title><link rel="stylesheet" type="text/css" href="/BMC/theme/com/sun/webui/jsf/suntheme4_1_1/css/css_master-all.css" /><link rel="stylesheet" type="text/css" href="/BMC/theme/com/sun/webui/jsf/suntheme4_1_1/css/ie.css" /><script type="text/javascript">var djConfig={"parseOnLoad":false,"isDebug":false}</script><script type="text/javascript" src="/BMC/theme/META-INF/json2_0/json.js"></script><script type="text/javascript" src="/BMC/theme/META-INF/prototype1_5/prototype.js"></script><script type="text/javascript" src="/BMC/theme/META-INF/com_sun_faces_ajax.js"></script><script type="text/javascript" src="/BMC/theme/META-INF/dojo1_0_1/dojo/dojo.js"></script><script type="text/javascript" src="/BMC/theme/META-INF/dojo1_0_1/dijit/dijit.js"></script><script type="text/javascript">dojo.registerModulePath("webui.suntheme", "/BMC/theme/com/sun/webui/jsf/suntheme4_1_1/javascript");</script><script type="text/javascript" src="/BMC/theme/com/sun/webui/jsf/suntheme4_1_1/javascript/webui-jsfx.js"></script><script type="text/javascript">webui.suntheme.bootstrap.init({"debug":false,"theme":{"locale":"en-US","prefix":"/BMC/theme","modulePath":"/com/sun/webui/jsf/suntheme4_1_1/javascript/theme","bundle":"suntheme","module":"webui.suntheme.theme"}});</script><link id="link1" rel="stylesheet" type="text/css" href="/BMC/resources/stylesheet.css" />I think the JK isapi_connector in IIS is preventing access to the META-INF path and the isapi_director log file says - "*+[emerg] HttpFilterProc::jk_isapi_plugin.c (1282): [BMC/theme/META-INF/json2_0/json.js] points to the web-inf or meta-inf directory. Somebody tries to hack into the site!!!+*". The same message is repeated for several more javascript files that are being served from under the META-INF path.
Any help or advice in this matter will be greatly appreciated.
Thanks!!!

I managed to find a workaround. Thought i should share it with those who are faced with a similar issue.
I found that a bug report had been placed in the past with Apache Dev. However, they had said that they would not modify their logic because the servlet container spec requires it (even though isapi_redirector is only a connector and not a container). They said that there is no way for the isapi_redirector to differentiate between /foo/WEB-INF when foo is a context and when foo is just a sub-directory of the ROOT web application. So, the general consensus was to err on the side of safety and risk blocking a few requests that are valid.
However, this causes a serious issue for those using NetBeans JSF Visual Web Projects. Hence, I created my own flavour of isapi_redirector by modifying the code such that this check is not performed and leaving the onus of checking on Tomcat.
For those who are interested, the simplest way to go about this would be to force the function uri_is_web_inf (in jk_isapi_plugin.c ) to always return FALSE.

Access JSF Pages within WEB-INF directory

Hi,
I am generating a project using JHeadstart 10.1.3
with the default setting for the UI Pages directory (/WEB-INF/page).
This means that the generated pages are placed in the page directory
within the WEB-INF directory.
The generated pages use ADF Faces and the problem is that I can't
get access to the pages in the WEB-INF directory
When I try to deploy to OC4J standalone, the pages in the WEB-INF directory
are not accessible.
I read that I have to construct a index.jspx file that forwards to
the first page (Home.jspx)
This is my index.jspx:
<jsp:root xmlns:jsp="http://java.sun.com/JSP/Page" version="2.0">
<jsp:scriptlet> request.getRequestDispatcher("WEB-INF/page/Home.jspx").forward(request,response);
</jsp:scriptlet>
</jsp:root>
This works, but I now have the problem of not getting a valid FacesContext:
500 Internal Server Error
javax.servlet.jsp.JspException: Cannot find FacesContext
at javax.faces.webapp.UIComponentTag.doStartTag(UIComponentTag.java:405)
at com.sun.faces.taglib.jsf_core.ViewTag.doStartTag(ViewTag.java:105)
at web2d_inf._page._Home_jspx._jspService(_Home_jspx.java:100)
[SRC:/WEB-INF/page/Home.jspx:9]
at com.orionserver[Oracle Containers for J2EE 10g (10.1.3.0.0) ].http.OrionHttpJspPage.service(OrionHttpJspPage.java:59)
at oracle.jsp.runtimev2.JspPageTable.compileAndServe(JspPageTable.java:662)
at oracle.jsp.runtimev2.JspPageTable.service(JspPageTable.java:370)
at oracle.jsp.runtimev2.JspServlet.internalService(JspServlet.java:478)
etc. etc.
What is the required way of setting up the forward (and having a valid FacesContext)?
I know that this is a JHeadstart problem, but maybe you guys know how to solve it.
Part of my web.xml:
<description>Empty web.xml file for Web Application</description>
<context-param>
<param-name>javax.faces.STATE_SAVING_METHOD</param-name>
<param-value>client</param-value>
</context-param>
<context-param>
<param-name>javax.faces.CONFIG_FILES</param-name>
<param-value>/WEB-INF/faces-config.xml,/WEB-INF/custom-faces-config.xml,/WEB-INF/JhsCommon-beans.xml,/WEB-INF/AppModule-Breadcrumb-beans.xml,/WEB-INF/Bpas-beans.xml,/WEB-INF/BpasLookup-beans.xml,/WEB-INF/GroupsLookup-beans.xml,/WEB-INF/PersonsLookup-beans.xml,/WEB-INF/OrganizationsLookup-beans.xml</param-value>
</context-param>
<context-param>
<param-name>CpxFileName</param-name>
<param-value>sumawest.view.DataBindings</param-value>
</context-param>
<filter>
<filter-name>adfFaces</filter-name>
<filter-class>oracle.adf.view.faces.webapp.AdfFacesFilter</filter-class>
</filter>
<filter>
<filter-name>adfBindings</filter-name>
<filter-class>oracle.adf.model.servlet.ADFBindingFilter</filter-class>
</filter>
<filter-mapping>
<filter-name>adfFaces</filter-name>
<url-pattern>*.jsp</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>adfFaces</filter-name>
<url-pattern>*.jspx</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>adfFaces</filter-name>
<servlet-name>Faces Servlet</servlet-name>
</filter-mapping>
<filter-mapping>
<filter-name>adfBindings</filter-name>
<url-pattern>*.jsp</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>adfBindings</filter-name>
<url-pattern>*.jspx</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>adfBindings</filter-name>
<servlet-name>ordDeliverMedia</servlet-name>
</filter-mapping>
<servlet>
<servlet-name>Faces Servlet</servlet-name>
<servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
<load-on-startup>1</load-on-startup>
</servlet>
<servlet>
<servlet-name>ordDeliverMedia</servlet-name>
<servlet-class>oracle.ord.html.OrdPlayMediaServlet</servlet-class>
<init-param>
<param-name>releaseMode</param-name>
<param-value>Stateful</param-value>
</init-param>
</servlet>
<servlet>
<servlet-name>resources</servlet-name>
<servlet-class>oracle.adf.view.faces.webapp.ResourceServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>Faces Servlet</servlet-name>
<url-pattern>/faces/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>ordDeliverMedia</servlet-name>
<url-pattern>ordDeliverMedia</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>resources</servlet-name>
<url-pattern>/adf/*</url-pattern>
</servlet-mapping>
<session-config>
<session-timeout>35</session-timeout>
</session-config>
<mime-mapping>
<extension>html</extension>
<mime-type>text/html</mime-type>
</mime-mapping>
<mime-mapping>
<extension>txt</extension>
<mime-type>text/plain</mime-type>
</mime-mapping>
<welcome-file-list>
<welcome-file>index.jspx</welcome-file>
</welcome-file-list>

I do something similar in my index.jspx file - but I needed to add "faces" to the url path. This will have the faces servlet process it and setup the faces context.
Have you tried changing
request.getRequestDispatcher("WEB-INF/page/Home.jspx").forward(request,response);to
request.getRequestDispatcher("faces/WEB-INF/page/Home.jspx").forward(request,response);

How to access the file in the WEB-INF Folder

hi..
i want to access a xml file, using servlet, which is placed under WEB-INF folder.
Please tell me how can i access the file.
I am using WSAD to develop the application
Thanx in advance.

I haven't tried accessing an XML file that is placed in WEB-INF folder.
Files under WEB-INF are usually protected from client/browser access, but a Servlet may be able to access it (not sure though).
What problems are you facing when you try to access an XML file in the WEB-INF folder?
If you can't access it from the WEB-INF folder , place it in any folder except the WEB-INF folder.
Also, if you want to protect the XML file then you could password protect it or deny access to it via .htaccess file, or simply return a 403 forbidden header.

Accessing classes in web-inf/classes within JSP

hi,
i know this is probably a very basic question..or nobody would ever do something like this..but I'mn curious:
i have a class Car.class in the WEB-INF/classes directory and I want to access it from withing JSP : <% Car c = new Car(); %>
the problem is that the server tries to load the class from the package : org.apache.jsp.Car ! when putting car into an own package like my.Car then it works.. but how do i get it working without putting it into a separate package?!
thx

You could try packaging it in a jar, and placing the jar in WEB-INF/lib... I have no idea if that will help, but when you're debugging, you have to be willing to try anything.. :)

Access resources not present directly under web-inf

hi,
My web application needs access to resources (e.g XML files, Image resources), with the following constraints:
1. Resources cannot be bundled into a jar file.
2. Resources cannot be placed under the context root, i.e. under the WEB-INF/classes. i.e these resources are placed in some other directory
It would be great help if somebody could throw more light on this topic.
thanks in advance,
java developer

In the %CATALINA_HOME%\bin\catalina.bat (or catalina.sh) file you can add the path to these resoures to the CLASSPATH that is built for tomcat. This should make them available to your web-apps. Then use 'catalina start' or 'catalina run' to start tomcat. If not using tomcat you'll have to look for where the server creates it's classpath.

Access dead page for access page under WEB-INF

hi, all , I have some page is under WEB-INF , if the user direct access this kind of jsp pages, will have some 4004 statue, could I have a customer error page to instead this 404 page . thankk you!

Thank you,
I realize my problem and your answer make my more understand my problem, but the problem still there.String myLink = req.getParameter("myLink");
            String target = null;
            HttpSession userSession = (HttpSession) req.getSession(true);
            HttpSession session = req.getSession();
            String word=(String)session.getAttribute("said");
           // out.println(word);
            if(word.equals("")||word==null)
             RequestDispatcher rd =
             getServletContext().getRequestDispatcher("/error/notFound.jsp"); //under?Hello
              rd.forward(req, response);
            else{
            target = "/WEB-INF/jsp/" + myLink;
            // at dSec.jsp id is link, so you can't use userSession.setAttribute("link", target) in here!
           // userSession.setAttribute("place", target);
            RequestDispatcher rd =
             getServletContext().getRequestDispatcher(target);
            rd.forward(req, response);} when I direct call my http://localhost/Hello/servlet/JumpLink?myLink=test1.jsp I get and empty page , not be forward to notFound page, what I did wrong?

PLEASE HELP. How do you access properties files in WEB-INF and classes directory

We have a war file that needs to access properties files that are in the WEB-INF directory
of the war file. We also need to load one of the properties files from the classpath.
However, when we deploy the application ( an ear which inlcludes an ejbjar and a
war and the libraries both the ejbjar (with a manifest setting the classpath ) and
war need ) the properties don't get extracted.
In some of our servlets we are trying to access those files with the path "WEB-INF/foo.properties"
and we get a FileNotFoundException. Then we check and see that NO properties files
have been extracted into their appropriate places ( not even those we throw into
the WEB-INF/classes directory ).
PLEASE HELP,
Christian Hargraves

The file doesn't have to be extracted from the war. For example, you can place
test.properties into your app WEB-INF and write a simple JSP to see how it
works:
<%
InputStream in = application.getResourceAsStream("/WEB-INF/test.properties");
%>
It will return you a zip inputstream if you deployed your application as a .war.
Christian Hargraves <[email protected]> wrote:
I try this, but I get a NullPointerException. The file never actually gets extracted
from the war. Under tomcat and resin this works great ( that's why I am having all
of the trouble i am having ), but there are absolutely no properties files in the
extracted directories for WebLogic deploys. only:
WEB-INF/some_tmp_dir/WEB-INF/lib
and then some dynamically generated jor file with all of the classes that would normally
go in WEB-INF/classes ( all except the properties, of course, which are no where
to be found. ).
There has to be some kind of setting I am missing. Please don't make me seperate
these properties files from the war/ear and then put the path to these properties
files in the CLASSPATH, changing one step to three steps to deploy!!
I have found a documented bug where you can't even put the properties files in a
jar file and that bug will never be fixed for WebLogic 6.1.
"Dimitri I. Rakitine" <[email protected]> wrote:
To access files in WEB-INF you can use ServletContext.getResourceXXX("/WEB-INF/filename")
Christian Hargraves <[email protected]> wrote:
We have a war file that needs to access properties files that are in theWEB-INF directory
of the war file. We also need to load one of the properties files fromthe classpath.
However, when we deploy the application ( an ear which inlcludes an ejbjarand a
war and the libraries both the ejbjar (with a manifest setting the classpath) and
war need ) the properties don't get extracted.
In some of our servlets we are trying to access those files with the path"WEB-INF/foo.properties"
and we get a FileNotFoundException. Then we check and see that NO propertiesfiles
have been extracted into their appropriate places ( not even those wethrow into
the WEB-INF/classes directory ).
PLEASE HELP,
Christian Hargraves--
Dimitri
Dimitri

ADF Faces - access to content in WEB-INF directory

Hello,
I create simple JSF application that use ADF Faces and deploy it to Oracle iAS. But why can i also access files in WEB-INF directory? For example, the following URL - http://myserver.si/MyApp/faces/WEB-INF/web.xml - will return the content of XML file. By my knowledge of J2EE architecture, access to this directory should be forbidden.
Should I set some parameter on javax.faces.webapp.FacesServlet servlet filter to prevent access to WEB-INF directory? Thank you for help.
Google also found the following links:
- http://mail-archives.apache.org/mod_mbox/myfaces-dev/200602.mbox/%[email protected]%3E
- http://svn.apache.org/viewcvs.cgi//myfaces/core/trunk/api/src/main/java/javax/faces/webapp/FacesServlet.java/?rev=375489&view=diff&r1=375489&r2=375488&p1=/myfaces/core/trunk/api/src/main/java/javax/faces/webapp/FacesServlet.java&p2=/myfaces/core/trunk/api/src/main/java/javax/faces/webapp/FacesServlet.java
Regards,
Matic

Hi,
the reason for this is that the WEB-INF directory is protected against direct client (browser) requests. Using Faces, the JSF servlet performs this access as a server side forward request in which case there is no container-managed protection.
If you want to avoid this then you can write a servlet filter in fron of JSF in which you check for any occurences of directories you want to prohibit access to.
Its not a bug, its the way J2EE is designed ;-(
Frank

Accessing WEB-INF

Similar Messages

Maybe you are looking for