Avoid Direcory Listing and deny the request to view the code

Question

I am Developing Application using struts. Could anyone Please help to solve out these issues.
i want to display message like directory listing is denied to see instead of giving 404 Error. i already mentioned in server.xml that directory listing
<servlet>
2 <servlet-name>default</servlet-name>
3 <servlet-class>org.apache.catalina.servlets.DefaultServlet</servlet- 4 class>
5 <init-param>
6 <param-name>debug</param-name>
7 <param-value>0</param-value>
8 </init-param>
9 <init-param>
10 <param-name>listings</param-name>
11 <param-value>false</param-value>
12 </init-param>
13 <load-on-startup>1</load-on-startup>
14 </servlet> so could you please tell me how to forward this request to some page to give message like directory listing is denied
I don't want to allow the user to see my internal coding i.e if he requested like this http://localhost:8080/war/js/script.js i just want to print message on the screen or redirect to home page
in mozilla i am facing the problem is it unable to load the scripts dynamically i.e it is not loading untill i clear the private data. is there any solution to solve this.
Thanks inAdvance

Answer 1

i want to display message like directory listing is
denied to see instead of giving 404 Error. i already
mentioned in server.xml that directory listing ...
so could you please tell me how to forward this
request to some page to give message like directory
listing is deniedAs I recall, this is a server-level configuration, not a Struts-level configuration, and it will depend on the server you're using.
I don't want to allow the user to see my internal
coding i.e if he requested like this
http://localhost:8080/war/js/script.js i
just want to print message on the screen or redirect
to home pageYou can do this by adding some code or configuration on your server that checks the referring URL. There's a module for Apache that does this (for all sorts of resources, not just .js files; in particular I think it's geared for images); I don't know about other servers. If it's not provided for by the server software, you can create a servlet that checks the referring URL. In a way a servlet is better, because then you could add more restrictions; for example, you could only deliver the .js content if the user has an active login session.
Note however that ultimately it's impossible to write client-side code (e.g., javascript) that the user can't view if they're determined to. The client has to be able to download and read the javascript in order to execute it; you can make it somewhat harder to download out of context but not impossible. The real solution is to keep anything sensitive out of client-side code.
in mozilla i am facing the problem is it unable to
load the scripts dynamically i.e it is not loading
untill i clear the private data. is there any
solution to solve this.I have no idea what you're saying here.