How to handle manipulated servlet mapping entries?

I am building a struts based web application with action url-pattern set to "*.do". During the test, I could break the application by enter wrong action name or wrong extentions such as "*.doo" .
The global application exception handler won't handle this since it treat it as an correct action and try to look up it .
For example, if the correct action mapping url is "member.do". I can break it by change to "mem.do" or "member.doo".
The error message i got is:
type Status report
message /member.doo
description The requested resource (/member.doo) is not available.
Thanks all for the help!
---------------------------

Your web.xml file is where you configure which requests get handled by the struts framework.
  <!-- Standard Action Servlet Mapping -->
  <servlet-mapping>
    <servlet-name>action</servlet-name>
    <url-pattern>*.do</url-pattern>
  </servlet-mapping>This is where it says "anything ending with ".do" is handled by the struts action servlet.
Is that what you mean maybe?
BTW I don't think you should have to handle users typing in *.doo into the address bar. There have to be SOME limits.

Similar Messages

  • How to specify  a servlet mapping as the url pattern with in the security constraints

    Hi ,
    Weblogic 6.0 documentation says the following:-
    Define which resources in the Web Application the security constraint applies to using the <url-pattern> element that is nested inside the <web-resource-collection> element. The <url-pattern> can refer to either a directory, filename or a <servlet-mapping>.
    To apply the security constraint to the entire Web Application, use the following <url-pattern>:
    <url-pattern>/*</url-pattern>
    Could any one let me know how to specify servlet mapping as the url pattern.
    I tried various combination and it doesn't seem to work and any help in this regard will be greatly appreciated.
    Thanks
    kannan

    The answer is posted here:
    Unapproved User Flag in UME

  • How to handle duplicate Primary Key entries in the Source data

    This is my first experience with ODI.
    I receive Source data from the customer that includes a one letter designation, ACTION_CODE, in each record of data as to the disposition of the record:
    ‘R’ represents Re-issue in which case I’m to modify the corresponding Target record based on the Primary Key.
    ‘N’ represents an Insert in which case I’m to insert a new record into the Target.
    ‘D’ represents a delete in which case I’m to delete the record with the corresponding Primary Key from the Target.
    The Source data comes in an XML file and the Target is an Oracle DB.
    I have chosen the IKM Oracle Incremental Update (MERGE) Knowledge Module.
    I filter ACTION_CODE to just collect records that are ‘N’ or ‘R’ and I exclude the ACTION_CODE from the mapping but since within the same Source
    set there may be an ‘N’ and ‘R’ with the same primary key I receive Primary Key errors.
    Should I alter CKM to not check for duplicates in the Source?
    Is there a better way?

    Ganesh,
    Identifying Duplicates is a logical activity.  More or less it need Manual intervention to judge both the records means common.  if few unique paramenters like Telephone, Pincode, SSN, passport no etc can be used on filters for searching the records.  Currently there are no automatic method to identify the duplicates.  In MDM 5.5 SP04 which is next release there will be auto de-duplicate facility based on tresholeds and matching criteria that you will setup.
    I hope i have answered your query transparently. if you have any queries futher you can reply here.
    Regards
    Veera

  • How to handle the LOV mapping in OAF

    Hi all I am Antony .
    I am trying to replace a LOV region in a Seeded page with that of Mine . I have succeeded in it ,but the LOV item is not returning to the field in the Page.Please help. I have created a new Region of type LOV and have chaged the region to that of mine in the Extended CO.Problem is Query has been changed but LOV selected item is not returning to the Page
    Edited by: 807207 on Nov 12, 2010 1:01 AM

    Hi
    I am having a Seeded page where there is a region in which an LOV is there ,I have created a new LOV RN with that Query ,now my problem is when I click the LOV my Query is getting executed but the Value that I select is not returnign to the Main Page.The main page is Controlled by A.CO and the LOV is controlled by some other CO.
    Also in the MAin page all the Values are populated from some VO where in the Query of the VO is something like this
    select to_number(NULL) Project_Id,
    NULL Project_Name,
    NULL Project_Number,
    NULL Project_Description,
    NULL Project_Status_Code,
    NULL Project_Status_Name,
    to_date(NULL) Project_Start_Date,
    to_date(NULL) Project_Completion_Date,
    to_number(NULL) Probability_Member_ID,
    NULL Probability_Percentage,
    to_number(NULL) Project_Value,
    to_date(NULL) Expected_Approval_Date,
    NULL Carrying_Out_Org_Name,
    to_number(NULL) Carrying_Out_Org_ID,
    NULL Customer_Name,
    to_number(NULL) Customer_ID,
    to_number(null) bill_to_customer_id,
    to_number(null) ship_to_customer_id,
    null bill_to_customer,
    null ship_to_customer,
    NULL Customer_Relationship_Code,
    NULL Public_Sector,
    to_number(NULL) Key_Member_id,
    NULL Key_Member_name,
    NULL Key_Member_role,
    NULL Distribution_Rule_Name,
    NULL Distribution_Rule_Code,
    NULL Class_Category,
    NULL Class_code,
    to_number(NULL) orig_project_id,
    to_number(NULL) Key_Member_Count,
    to_number(NULL) Class_Code_Count,
    NULL Team_Template_Name,
    to_number(NULL) Team_Template_Id,
    NULL Location_Country_Code,
    NULL Location_City,
    NULL Location_State_Region,
    NULL Location_Country_Name,
    to_number(NULL) Role_List_Id,
    NULL Agreement_Currency_Code,
    NULL Agreement_Organization,
    to_number(NULL) Agreement_Organization_Id,
    to_number(NULL) Agreement_Amount,
    NULL Opportunity_Currency_Code,
    to_number(NULL) Org_Member_id,
    NULL Org_Member_name,
    NULL Org_Member_role,
    to_number(NULL) Org_Member_Count,
    NULL Priority_Code,
    to_number(NULL) security_level,
    NULL long_name
    from dual
    out of all I am trying to change the CustomerName attribute and the code tat I have used is
    customerBean.setLovRegion(oapagecontext,"/XXXX/oracle/apps/pa/util/lov/webui/XXXXCustomersLovRN");
    customerBean.addLovRelations(oapagecontext,"CustomerName","CustomerName",LOV_RESULT,LOV_REQUIRED_YES);
    Edited by: 807207 on Nov 12, 2010 10:50 PM

  • Understanding Faces Servlet Mapping

    Hi guys, I would like understand how work the Faces Servlet mapping.
    In a web.xml file I put
    <servlet-name>Faces Servlet</servlet-name>
    <servlet-class>javax.faces.context.webapps.FacesContext</servlet-class>
    <servlet-name>Faces Servlet</servlet-name>
    <url-pattern> /<my_app_context>/* </url-pattern>  <!-- Here is my curious... -->1) If I put "/my_context/*" everything below "my_cotnext" (include JSP) is throughout to faces servlet, isn't?!!? can I just acces "http://localhost/my_context/index.jsp?!??
    2) If i put "/faces/*" and use the URL "http://host/faces/my_context/index.jsp" I need to create a folder call faces inside "$CATALINA_HOME/webapp" ?!?!?
    If not, what occurs?!!??
    3) If i put "*.faces" can I save my jsp file with the extension jsp, for example index.jsp at context my_context, and before access by URL "http://localhost/my_context/index.faces"?!? If I can, how the tomcat find the index.jsp
    Well, if someone can exaplain this rules in Tomcat for me will be very great!!!!!
    Thanks all
    Giscard

    Hi Gisard,
    as far as I did understand the whole thing you have two possibilities
    1. Path Mapping
    2. Extension Mapping
    I'm using Path Mapping, so I have the following entry in my web.xml:
    <servlet>
            <servlet-name>Faces Servlet</servlet-name>
            <servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
            <load-on-startup> 1 </load-on-startup>
    </servlet>
    <servlet-mapping>
            <servlet-name>Faces Servlet</servlet-name>
            <url-pattern>*.jsf</url-pattern>
    </servlet-mapping>That's quite easy to use, because in my navigation rules in the faces-config.xml I just use something like this:
    <navigation-rule>
        <navigation-case>
          <from-outcome>installation</from-outcome>
          <to-view-id>/pages/installation/inst_index.jsf</to-view-id>
        </navigation-case>
    </navigation-rule>And I have the page "inst_index.jsp" in my folder "web-app-context/pages/installation".
    I can access it with the URL:
    "http://localhost:8080/<web-app-context>/pages/installation/inst_index.jsf".
    If you want to use path mapping you should have the following entry in your web.xml:
    <servlet>
            <servlet-name>Faces Servlet</servlet-name>
            <servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
            <load-on-startup> 1 </load-on-startup>
    </servlet>
    <servlet-mapping>
            <servlet-name>Faces Servlet</servlet-name>
            <url-pattern>/faces/*</url-pattern>
    </servlet-mapping>So for example if you want to access the page "inst_index.jsp" in the folder "web-app-context/pages/installation" you have to use the URL:
    "http://localhost:8080/<web-app-context>/faces/pages/installation/inst_index.jsp".
    But you don't need a new folder "faces" within your web-app.
    I hope I could help you with that.
    Steffi

  • How to handle multiple request in the servlet

    how to handle multiple request in the servlet...
    Example:
    java forum...
    i'm login in the java forum at this time 1000 members make login in this....how happended in servlet?
    if we use thread how to implement in servlet ?

    Serlets are already threaded. The application container instantiates the servlet, then uses this instance in a new thread for every use.
    This is the reason that you should use (almost) no instance variables in a Servlet, but rather that (almost) everything should be local to the method.

  • How to Handle and show multiple pushpin imgaes on the map based on the requirement at different coordintes?

    How to Handle and show multiple pushpin imgaes on the map based on the requirement at different coordintes?
    I have multiple images in  my App folder. I want to use and show those images dynamically  in windows phone 8 map application

    There are a lot of different ways to do this. One simple method is to use a switch statement when creating your pushpins and based on some property in your data, select the icon you want to use and create your pushpin accordingly.
    http://rbrundritt.wordpress.com

  • How to handle FTP request in Servlet

    Hi,
    can anyone tell me how to handle FTP operations in Servlet? I mean to ask whether we can handle FTP request in Servlet.
    Thanks
    Subs

    Your servlet should extend from GenericServlet and not HttpServlet to handle ftp requests.

  • How to handle multiple requests to the same servlet at one time?

    Hi,
    I am new to Servlets. I have doubt regarding ... Handling multiple requests to a servlet at a time.
    If we send a single request to a servlet, as know that group of objects such as servlet, servletContext, servletConfig, request, response and etc are created in the server, And if 1000's of requests are sent to a same servlet at a time, and if server memory capacity is less, then 1000's of objects are created in a server which would be heavy burden to Server. How to handle the application and development in such situation?
    Kind regards,
    veerendra

    Hi veerendra reddy ,
    By default any web server can will have a thread pool to handle client req's.
    In your point also heavy burden to server you are telling that depends on this.
    we can configure this min & max size of this thread pool.
    by default it will be 0-1000 for tomcat server.
    I am not sure in which file this configuration will be.
    But I hope in server.xml or some xml file consists this info.
    If You what you can edit accordingly. to overcome your heavy burden to server.
    Thanks & Regards
    Nagendra

  • How to handle more than one submit buttons on servlets

    Hi:
    anyone know how to handle the multiplet submit button on servlet,
    such as next, previous, add and so on.
    Thank you

    Don't worry about because only the button that is clicked will get submitted. In the servlet you just test for the existance of a parameter:
    if (request.getParamter("SubmitButton1") != null) { ..... }
    if (request.getParamter("SubmitButton2") != null) { ..... }
    Save the following HTML code, open in IE and click on the buttons to see what will get sent to the servlet:
    <html><head></head><body>
    <form method="GET">
       <input type=text name=text1>
       <input type=submit name="Submit1" value="Me">
       <input type=submit name="Submit2" value="you">
    </form>
    </body></html>

  • How to handle duplicate nodes in xslt mapping

    Hi,
    in my scenario that i have a source mapped to the canonical structure and from canonical to target.
    source structure
    <empid>
    <national_id>
    canonical structure
    <id> 0 to unbounded
        <id>
        <type>
    the mapping from source to canonical
    is like i have duplicated the canonical structure and then mapped
    id -
    empid
    type--- assigned a constant employee
    id -
    national_id
    type--- assigned a constant National
    i have used xslt mapping using stylus studio and mapping from source to canonical is not the problem
    when i mapped the canonical to target there is a problem
    the node id is visible once in the canonical when the structure is a source  
    but there is a dupicate node in the structure but not visible. how to procedue with the mapping for canonical to target
    kindly help me
    with regards
    pradeep N

    hi,
    Udo Martens.
    <b>source xml</b>
    <?xml version="1.0" encoding="UTF-8"?>
    <ns0:Materail_fileReceive xmlns:ns0="http://www.aprilbiztec.in/MM_MultiFile">
       <Emp_ID>12</Emp_ID>
       <National_ID>91</National_ID>
    </ns0:Materail_fileReceive>
    <b>canonical xml</b>
    <?xml version="1.0" encoding="UTF-8"?>
    <ns0:Materail_file xmlns:ns0="http://www.aprilbiztec.in/MM_MultiFile"><Material><ID>12</ID><Type>Employee</Type></Material><Material><ID>91</ID><Type>National</Type></Material></ns0:Materail_file>
    <b>source to canonical mapping is</b>
    <?xml version='1.0' ?>
    <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:ns0="http://www.aprilbiztec.in/MM_MultiFile">
         <xsl:template match="/">
              <ns0:Materail_file xmlns:ns0="http://www.aprilbiztec.in/MM_MultiFile">
                   <Material>
                        <ID>
                             <xsl:value-of select="ns0:Materail_fileReceive/Emp_ID"/>
                        </ID>
                        <Type>Employee</Type>
                   </Material>
                   <Material>
                        <ID>
                             <xsl:value-of select="ns0:Materail_fileReceive/National_ID"/>
                        </ID>
                        <Type>National</Type>
                   </Material>
              </ns0:Materail_file>
         </xsl:template>
    i want the<b> canonical to target mapping</b> where my target structure is similar to that of my source
    kindly help.
    regards
    pradeep N.

  • How to Handle SAP SUS XML Acknowledgment

    Hi folks,
    I have a scenario here where the SAP R/3 system sends a Purchase Order document to SAP SUS through a SAP XI Mapping.
    After processing the P.O. document, the SAP SUS system, automatically, returns a Acknowledgment message (ns: http://sap.com/xi/XI/Message/30) to SAP XI.
    I need to implement a BPM scenario where SAP XI processes this Acknowledgment message and Logs it into my Monitor System (JDBC Adapter). Actually, the SAP XI needs to send to my Monitor System the status (Success or Fail) of the P.O. processing by SAP SUS.
    How can I handle this Acknowledgment message with a BPM Scenario? Is it possible?
    Best Regards,
    Nascimento

    Hi Thiago,
    Currently in BPM you can do this with ASYNC-SYNC Bridge design.
    You can not dirrectly access the content of the ACK, however the BPM shows different behaviours based on the ACK status. E.g. if the ACK contains a success message the BPM will continue in its normal process, if the ACK contains a permanent error, it will either stop or go through an exception branch (provided such a branch has been defined). Have a look at the documentation: http://help.sap.com/saphelp_nw04/helpdata/en/43/65ce41ae343e2be10000000a1553f6/content.htm It doesnt"t state the above mentioned behaviour in detail but says that you need to define an exception branch.
    The trickiest part is always to find out, when you will get a transient vs. as permanent error ack. If you are using ACKs with Proxies refer also to this link http://help.sap.com/saphelp_nw04/helpdata/en/29/345d3b7c32a527e10000000a114084/content.htm and this http://help.sap.com/saphelp_nw04/helpdata/en/f4/8620c6b58c422c960c53f3ed71b432/content.htm
    Receiver adapters that run on the Adapter Engine support system acknowledgments if they are requested by the sender. Acknowledgements are triggered when a message is successfully processed by the adapter or if an error occurs while it is being processed. Receiver adapters do not support application acknowledgments. The RNIF and CIDX adapters are exceptions to this rule, since they also support scenario-dependent application acknowledgments. Sender adapters of the Adapter Engine do not request any acknowledgments.
    However IDoc adapter is requesting application acks. Therefore you have to disable acks for this scenario using report IDX_NOALE.
    Also go through these documents for any further help:
    http://sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/xi/xi-how-to-guides/how%20to%20handle%20acknowledgments%20for%20idoc.pdf
    http://help.sap.com/saphelp_nw04/helpdata/en/6a/e6194119d8f323e10000000a155106/content.htm
    Also refer the guide: "How To Handle Acknowledgments for IDoc"
    https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/f6d2d790-0201-0010-9382-b50b499b3fbe
    Regards,
    Abhy
    Message was edited by: Abhy Thomas

  • How to handle multiple datasources in a web application?

    I have a J2EE Web application with Servlets and Java ServerPages. Beside this I have a in-house developed API for certain services built using Hibernate and Spring with POJO's and some EJB.
    There are 8 databases which will be used by the web application. I have heard that multiple datasources with Spring is hard to design around. Considering that I have no choice not to use Spring or Hibernate as the API's are using it.
    Anyone have a good design spesification for how to handle multiple datasources. The datasource(database) will be chosen by the user in the web application.

    Let me get this straight. You have a web application that uses spring framework and hibernate to access the database. You want the user to be able to select the database that he wants to access using spring and hibernate.
    Hopefully you are using the Spring Framework Hibernate DAO. I know you can have more that one spring application context. You can then trying to load a seperate spring application context for each database. Each application context would have it's own configuration files with the connection parameters for each datasource. You could still use JNDi entries in the web.xml for each datasource.
    Then you would need a service locater so that when a user selected a datasource he would get the application context for that datasource which he would use for the rest of his session.
    I think it is doable. It means a long load time. And you'll need to keep the application contexts as small as possible to conserve resources.

  • How to handle xml message in proxy inbound processing?

    Hi Experts,
    I have a scenario that is SOAP Client====>XI===>ECC.
    But i don't need to use the XI mapping,i skip mapping
    in XI and use the generated proxy inbound processing.
    Here is a message structure as below.
    <commodityList>
    &#9632;<commodity>
    &#9632;&#9632;<detailNo>303303</detailNo>
    &#9632;&#9632;<makerName>sony</makerName>
    &#9632;&#9632;<ChargeInfoList>
    &#9632;&#9632;&#9632;<productId>aaaa</productId>
    &#9632;&#9632;&#9632;<name>bbb</name>
    &#9632;&#9632;</ChargeInfoList>
    &#9632;</commodity>
    </commodityList>
    When i sent the message without field entry of <productId>
    and <name> i got the response in soap client as below.
    <commodityList>
    &#9632;<commodity>
    &#9632;&#9632;<detailNo>303303</detailNo>
    &#9632;&#9632;<makerName>sony</makerName>
    &#9632;</commodity>
    </commodityList>
    The field tag <ChargeInfoList> doesn't display.
    But i want it to display as below.
    <commodityList>
    &#9632;<commodity>
    &#9632;&#9632;<detailNo>303303</detailNo>
    &#9632;&#9632;<makerName>sony</makerName>
    &#9632;&#9632;<ChargeInfoList>
    &#9632;</commodity>
    </commodityList>
    In case of field entry is empty,how to  let the response
    contains tag?
    As i know ,there is a CONTROLLER in proxy .
    But i don't know if it is relevant to this
    case and i don't know how to handle it.
    Brand

    Hi Mrudula,
    As far as i know there are no content conversion methodology for HTTPS as the recevier adapter.
    Also you can read through these links to confirm the same:
    http://help.sap.com/saphelp_nw04/helpdata/en/0d/5ab43b274a960de10000000a114084/content.htm
    http://publib.boulder.ibm.com/infocenter/wbihelp/v6rxmx/index.jsp?topic=/com.ibm.wbia_adapters.doc/doc/sap_xi/sapximst30.htm
    SAP NetWeaver - XML Communication Interface (CA-XML) [original link is broken]
    Regards,
    abhy
    note: reward the helpful.

  • Invalid element 'servlet-mapping' in content of 'web-app'

    Hello, JDev gurus!
    When compling, JDev 9.0.2.822 produce following error
    "oracle.xml.parser.v2.XMLParseException: Invalid element 'servlet-mapping' in content of 'web-app', expected elements '[taglib, resource-ref, security-constraint, login-config, security-role, env-entry, ejb-ref]'."
    on line <%@ taglib uri="http://xmlns.oracle.com/bibeans" prefix="orabi" %>
    This line was added automatically from component palette.
    How can I resolve this error?

    Hi,
    Did you change something into your web.xml file?
    Look at your web.xml. You must preserve the order given by the error message:
    Servlet-mapping
    session-config
    mime-mapping
    ejb-ref
    Jamil

Maybe you are looking for

  • Problème graphe en temps relatif

    Bonjour, J'ai crée un VI d'acquisition de tension avec un port USB NI9219 qui mesure différentes tension d'entrée à une fréquence élevée(ex : 100 Hz). De plus mon VI enregistre les mesures que lorsque la tension mesurée change de 0,01v. Le VI trace é

  • Spool to csv file problem--comma included in the data

    Friends, i spooled the table's data to csv file. when i open it in the excel sheet some of the records are in the different cells. below is the record.... Colonial Street, Ruwanda so when i view it in the excel sheet. Colonial Street is coming in one

  • DBMS_XMLSCHEMA.CopyEvolve produces ORA-30945: Could not create mapping tabl

    Hi, I am trying to update a XML Schema concerning the documents relaties.xsd (the old one) and relaties_v2.xsd (the new one containing only a minor change). The document relaties.xsd looks like this: <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLS

  • PSE12 Came with PC and I can't find the serial number?

    Its been a few months since I bought my PC (a VAIO Tap 11) and it came with some free drawing/image editing software such as Artrage and it also came with PSE12. I was hoping to be able to register my product online but I later became aware that the

  • Micro SD not detected in Z1 Compact

    Hi, I have been using my SD Card in my new Z1 compact for a couple of days. Today I removed it and put it in my old phone to copy some data. After copying the require data, when I put the card in my Z1 Compact, it is not detected, but it is still det