View source code directly?

All,
I am running WLS510+WLCS310.
It is possible to view the source code by entering this URL:
http://localhost:7001/wlcs/index.jsp%00
By appending "%00", the jsp will not be executed and view all source
code! Any workaround/patch for this? This is a serious problem.
Please help. Thanks.
/Frank

Hi Frank,
BEA has a security advisory for this problem.Check the following
link.This should solve your problem.
http://developer.bea.com/code/security_000621.jsp
Regards,
Gigen Thoams
"Frank" <[email protected]> wrote:
>
All,
I am running WLS510+WLCS310.
It is possible to view the source code by entering this
URL:
http://localhost:7001/wlcs/index.jsp%00
By appending "%00", the jsp will not be executed and view
all source
code! Any workaround/patch for this? This is a serious
problem.
Please help. Thanks.
/Frank

Similar Messages

Xletview: why not use sun's javaTV source code directly ?

xletview : one emulator for viewing MHP Xlets on a PC;
I see many difference from sun's code about the part of javaTV.
Why the author Martin Sveden need to rewrite them and not use sun's javaTV source code directly ?
Thank you for your any answer.
Sorry for my horrible english.

XleView is a fine effort, but it has its limitations. I tried using it for the GunBunny demo available in the JavaME SDK 3.0 Eary Access available in
http://java.sun.com/javame/downloads/sdk30ea.jsp
and I encountered some of thost limitations. What Sveden does it several tricky manipulations in a classloader for the Xlet. In particular, he translates bytecode as he loads the Xlet's classes, changing some class names, such as changing
java.awt.Toolkit
tto
xjava.awt.Toolkit
This works up to a point. This version of Toolkit usually just turns around calls java.awt.Toolkit's corresponding routine, but he deliberately he does not implement the ubiquitous
public Image createImage(URL url)
When I downloaded his source and tried adding ths into his code, I then encountered at runtime
Uncaught error fetching image:
java.lang.NullPointerException
at sun.awt.image.URLImageSource.getConnection(URLImageSource.java:97)
at sun.awt.image.URLImageSource.getDecoder(URLImageSource.java:107)
at sun.awt.image.InputStreamImageSource.doFetch(InputStreamImageSource.java:240)
at sun.awt.image.ImageFetcher.fetchloop(ImageFetcher.java:172)
at sun.awt.image.ImageFetcher.run(ImageFetcher.java:136)
I think that this is some optimization within J2SE where they do not wait for the image to load and do the fetching in a separate thread. I do not know if there is some way to force the Sun's JVM to disable this optimization and I have not investigated furher, but I did email Svenden. I noticed that the current version of XleTView is 0.3.6 which is dated June 2004 and the web site http://www.xletview.org/ has had not news since 2005 .
I note that Svenden provides an elegant user interface but I advise you not try to learn the API's from his classes: he makes no effort to keep his implementation separate from the API standards so, for instance, his version of HScene is
package org.havi.ui;
public class HScene extends Container
implements HComponentOrdering, ImageObserver, MenuContainer, Serializable {
whereas the real standard is
public class HScene extends Container
implements HComponentOrdering {
I hate to critize such a fine effort, but it is best to keep an imlementation separate from the public API.
I agree that having a lightweight, simple and Java feature-complete Xlet viewer running would be very helpful, especially if BD-J gains much popularity. I have found trying to work with the vendor players described at
http://wiki.java.net/bin/view/Mobileandembedded/Blu-RayDiscHelloWorld
to be frustrating. I tried all four mentioned and I have gotten none of them to work for me yet. These are huge downloads and the "Intro Version" of Arcsoft pointed to at the SDK 3.0 Early Access page
http://www.arcsoft.com/products/totalmediatheatre/
just gives a "File not found" HTML page. This forum post mentions that perhaps it was recently taken down?
http://www.arcsoft.com/forum/forum_posts.asp?TID=1084
I have already emailed Michael Downs of Arcsoft since he is mentioned here:
http://wiki.java.net/bin/view/Mobileandembedded/BDJPCPlayers
What did work for me was to take Sun's JavaTV 1.1 Reference Implementation and PowerDVD's BDJ.jar and hack/fix a few classes to get GunBunny to work within the RI's RunXlet program. This is not trivial but I will will describe:
Download the JavaME 3.0 SDK EA and then download the correct version of PowerDVD that the SDK page points to:
http://www.brothersoft.com/powerdvd-download-50794.html
Download the RI binary and source of Java TV API 1.1
http://java.sun.com/javame/technology/javatv/index.jsp
Since I am too lazy to use anything but the latest 1.6 JRE as a runtime, I have to fix
com.sun.tv.media.util.MediaThread
to comment out its stop() method. This is becase stop() was deprecated and made final in J2SE 1.5
http://java.sun.com/j2se/1.5.0/docs/api/java/lang/Thread.html#stop()
http://java.sun.com/j2se/1.5.0/docs/guide/misc/threadPrimitiveDeprecation.html
Next, I had to mae a change to Sun's JavaTV implementation to keep the GunBunny demo happy by providing a ServiceContext. The RunXlet program calls SIEmulator, but that environment does not provide a ServiceContex, so I added one back in:
com.sun.tv.receiver.SIEmulator
private static ServiceContext svcctx = null;
Add before every call to new AppSignalEvent() and add the svcctx as the second-to-last argument:
if(svcctx == null){ try { svcctx = new com.sun.tv.ServiceContextImpl(); }catch (Exception e){ e.printStackTrace(); } }
I then had to hack a few PowerDVD classes, which is evil of me. First, I had to build an empty class by the name of
sun.util.BDJPlugin
becuase some PowerDVD class extends it but it is not in its BDJ.jar and then I had to reverse-compile (evil!) and modify one of their internal classes to avoid a dependency on their native methods. What I ended up with was a hacked version of com.cl.bdj.helper.CUtil to avoid the native methods which access the registry where they query for registry settings but also provide a default value (which I return).
com.cl.bdj.helper.CUtil
private static String pGetRegistryString(long i ,String string ,String string3) {
return string3;
private static int pGetRegistryInt(long i ,String string ,int j) {
return j;
The last thing I had to do was to change com.hdccookbook.gunbunny.BaseXlet, to use the JavaTV container rather than the org.havi one:
import javax.tv.graphics.TVContainer;
import java.awt.Container;
change
// protected HScene scene;
protected Container scene;
public final void run() {
// waitForPresenting();
// scene = HSceneFactory.getInstance().getDefaultHScene();
scene = TVContainer.getRootContainer(xletContext);
In order to having working keys, I had to add the KeyListener interface to BaseXet and
run(){
addKeyListener(this);
and then add a near duplicate of the org.dvb.event.UserEvent* stuff that is already there:
public void keyPressed(KeyEvent e){
switch(e.getKeyCode()){
case KeyEvent.VK_0:
case KeyEvent.VK_1:
case KeyEvent.VK_2:
case KeyEvent.VK_3:
case KeyEvent.VK_4:
case KeyEvent.VK_5:
case KeyEvent.VK_6:
case KeyEvent.VK_7:
case KeyEvent.VK_8:
case KeyEvent.VK_9:
numberKeyPressed(e.getKeyCode() - KeyEvent.VK_0);
break;
case KeyEvent.VK_ENTER:
enterKeyPressed();
break;
case KeyEvent.VK_LEFT:
arrowLeftKeyPressed();
break;
case KeyEvent.VK_RIGHT:
arrowRightPressed();
break;
case KeyEvent.VK_UP:
arrowUpPressed();
break;
case KeyEvent.VK_DOWN:
arrowDownPressed();
break;
public void keyReleased(KeyEvent e){
// System.out.println("Released: e="+e+" code="+e.getKeyCode());
public void keyTyped(KeyEvent e) {
// System.out.println("Typed: e="+e+" code="+e.getKeyCode());
It then comes up and functions, but the rendering is not very good. Again, this is complete hack. Running the Java TV 1.1 RI in a JRE 1.6 is not supported. If you try to run any of the other examples, you will discover that the XML parsing is broken in JRE 1.6 with this message:
Parsing failed: com.sun.org.apache.xerces.internal.impl.io.MalformedByteSequence
Exception: Invalid byte 1 of 1-byte UTF-8 sequence., file: lib\JavaTVSampleFile01.xml
and you have to go and change the lines in
lib\JavaTV.properties
from
ServiceFileHandler=com.sun.tv.receiver.ReceiverFile
# ServiceFileHandler=SampleData_01
to
# ServiceFileHandler=com.sun.tv.receiver.ReceiverFile
ServiceFileHandler=SampleData_01
and build samples\db\SampleData_01.java and put it in your classpath along with all these other hacks.
Nonetheless, if you want to develop a somewhat generic Xlet that uses some BD-J features, that is how you might do it. But the moment you exercise anything else in the vendor's BDJ.jar that simply doe snot work outside of their environment or invokes one of their native methods, you are again stuck.
It would be nice if Sun would at least bother to update the JavaTV RI with the fixes I hae mentioned. Their "jmflite" implementation does not render perfecly but at least it would give the programmer something to work with without having to deal with an older JRE, etc.
Andrew
Edited by: AndrewMorrow on Oct 20, 2008 2:48 AM

View source code of the page executed in browser...

Hi,
Request you to help me to view the source code of the page executed in browser using a Query/ Web Template. We can view the HTML code when we go to
Page--> View source code.
But i want to see the Java code behind the web page.
Regards,
Koundinya K

You can use tools like JD-GUI and the see the code. If you want to customize a cartirdge, you can always extend the class and add your stuff to the contentItem.
Thanks

Ffox hangs when I try to view source code - any ideas how to stop this?

Ffox hangs when I try to view source code - any ideas how to stop this?
hangs forever... have to use control-alt-del to close :-(

Usually a USB error. Read here:
http://support.apple.com/kb/ts3694#4000

Sql Developer - View source code of procedures, functions & packages in another schema

Our developers need the ability to view procedures, function, packages etc. in the production database (using SQL DEVELOPER). They don't have access to sign on as the owner of these
objects in Production. They must use their own limited access UserID for this purpose.
This limited access UserID has been granted select privilege on DBA_SOURCE & DBA_OBJECTS. The developers need the ability to view the source of these object via
the tree view in SQL DEV. They should be able to click on "other users" in the SQL DEV tree view and see a listing of the owner schema objects. Then they should
be able to select the desired object and view the source code. These developers are used to using GUI interfaces. Selecting from DBA_SOURCE would not be an
option for them.
I understand that if the limited user is granted SELECT ANY DICTIONARY or SELECT_CATALOG_ROLE then this functionality will work. The problem is those
privileges/roles provide much more access than should be granted to these limited access users. Granting DBA to these users is also not an option.
In TOAD and other end-user tools this functionality works when only select privilege on DBA_SOURCE & DBA_OBJECTS has been granted. We need this same functionality
in SQL DEV.
While searching this forum and the internet, I see that other installations have this same issue.
Please enhance SQL Developer with this functionality.
Thank you, ellen

Just to double check that I'm interpreting the problem correctly, is the following true:
select * from all_objects where object_name = 'DBA_SOURCE'
returns nothing
select * from dba_source where name = your PL/SQL module
returns all the code

View source code of UDF's and Standard Functions

Hi Friends,
Is it possible to view the source code written in the UDF's and Standard Functions.
If possible please enlighten me.
Thanks,
Swapna.

Hi,
I dont think u can view the src code for Standard function but try this.
While holding down "ctrl" + "shift" + "0" key click on the standard function.See if u can export it and check for some src
code
Regards,
Shabari

View Source code

Gurus,
I have a Schema APPLOWN that owns the application objects (tables,pl/sql objects,etc.). Like wise I have seperate schemas for BATCH,WEB,LOAD & DEV
The APPLDEV is the developer schema where the developer can use it for querying tables.
Now, How do I enable the developer to see the PL/SQL objects source code that are owned by APPOWN? What kind of grant am I missing for APPLDEV user?
Please help.

grant execute on APPOWN.procedure_name to APPOWN;Even allowing for the typo this is not necessarily the correct approach. this allows the APPDEV accounts to run the code which is different from merely seeing the source code. Bear in mind also that being granted EXECUTE on a package allows us to see the source of the package spec but not the body (this is wht pacakages are so good for security).
So the question becaomes, if the account is not allowed to execute the code why should it be allowed to see the source? For developers the answer is presumably "to understand what the code does".
The correct approach is
(1) Decent documentation. Notice that I managed to keep a straight face when I typed that
(2) having all the code in a source control repository. This is good practice anyway but does have the advantage that people can eyeball the code without changing the database privileges (which is desirable).
In the absence of those two good things the third option is for SYS to create a view like
CREATE OR REPLACE VIEW appown_source AS
SELECT * FROM DBA_SOURCE
WHERE owner = 'APPOWN'
GRANT SELECT ON appown_source TO appdev
/Cheers, APC

Viewing source code Safari 8.0

How do you view the source code for a website in Safari 8.0/Yosemite?

Safari - Preferences - Advanced - Show Advanced Menu, then Develop menu and select Show Page Source.

Is there HTML link code which will open "View Source Code" in a visitor's browser?

This is for use only by my client during development.
TIA

This is a JavaScript that displays source code for any URL you type in to defeat the dreaded "disable right click". Maybe you could fiddle it for your purpose.
http://javascript.internet.com/page-details/source-viewer.html
Nancy O.
Alt-Web Design & Publishing
Web | Graphics | Print | Media Specialists
www.alt-web.com/
www.twitter.com/altweb
www.alt-web.com/blogspot.com

Setting password to view source code.,,

How can I set password to restrict users from accessing or viewing my code..

Hi joseph,
Welcome to SDN.
1. SEUED001
   We can make use of this enhancement,
   and the FM EXIT_SAPLS38E_001
   (inside this enhancement)
2. Inside this u can
    give error message so that
   se38 does not proceed further
   to even display the source code !
3. One can use like this :
   eg.
Data
DATA : terminal LIKE usr41-terminal.
DATA : BEGIN OF itab OCCURS 0,
       myprog LIKE sy-repid,
       END OF itab.
My prog
itab-myprog = 'ZAM_TEMP174'.
APPEND itab.
itab-myprog = 'ZAM_TEMP173'.
APPEND itab.
Check
CALL FUNCTION 'TERMINAL_ID_GET'
EXPORTING
USERNAME                   = SY-UNAME
IMPORTING
   terminal                   = terminal
EXCEPTIONS
MULTIPLE_TERMINAL_ID       = 1
NO_TERMINAL_FOUND          = 2
OTHERS                     = 3
Detect
LOOP AT itab.
IF program = itab-myprog.
    IF terminal CS '10.101.8.101' AND operation = 'EDIT'.
     MESSAGE e999(yhr) WITH 'Not Allowed'.
    ENDIF.
ENDIF.
ENDLOOP.
regards,
amit m.

View Source Code of Existing iPhone Apps

Is there a way to view the source code of existing iPhone Apps?

The files uploaded to the iTunes store are only those included in the .app package. These include all the resources, so all the .nib files would be there, but there's no source code in that package as far as I know. You can view the package you would upload by expanding the Product folder in the Xcode Groups & Files tree. Then Ctrl-click on the .app icon, select Reveal in Finder, Ctrl-click on the .app package and select Show Package Contents.
Lots of independent developers (as distinct from corporation employees) are willing to share their knowledge including excerpts from their code, and that's what this forum is all about. I've pasted lots of source code from my app into the answers I've provided in this forum. If you contact a developer privately, I think it would be better to ask "How did you do that?" instead of asking for the complete source code. But there are lots of people out there who enjoy teaching others even more than protecting their ideas. My only disappointment in this forum is that many (but certainly not all!!) are really good at saying "please", but seem to have some language problem with "thank you".

Using wysiwyg text editor in drupal the latest firefox does not wrap text when viewing source code-chrome ie ok

Using drupal ckeditor profile with wysiwyg . Firefox latest version is apparently not respecting the width of the i-frame text editor box and the text is not wrapping when viewing in source code mode. Chrome and IE are working as expected. Windows 7

[https://support.mozilla.org/en-US/kb/where-go-developer-support Where to go for developer support]

Can't use right click to view source code of photos

In Windows I can right click my mouse to view the source code of a posted photo. However, I don't see this capability in the iMac. Am I wrong and, if so, how to do it?

It actually works with Photoshop but not with Flash Pro.

Trying to view source code

Cannot view my source code. I go to view --> page source is not there? I'm only getting toolbars, sidebar, zoom, page style, character encoding, full screen. Is there another way to find source code? Why is page source not coming up? Any help would be appreciate! Thnx!

The Page Source menu item was moved to 'Tools' -> 'Web Developer' -> 'Page Source'.
You can also access it by right-clicking on a page ('View Page Source'), or with the keyboard shortcut '''Ctrl+U'''.

Decompiling a .DLL file to view Source Code

Hi guys,
I have a DLL file which I would like to decompile in order to edit the source code... Does anyone have any idea of how I come go about doing this?
I don not have the original solution (The person who wrote it has left the company)
Thanks
Neefy

Hello,
I am in the same situation as Neefy was. I followed everyones advice and went to get .Net Reflector. Sadly you have to pay $35 for it now. I am not sure if the company wants to buy this if it does not work how we want. I noticed they have a beta version
out for free. I downloaded this and then FileGenerator plugin from the link provided. I started following Rukshan's steps. I get to step 4. After I click add and locate the plugin I get an error saying that it failed to to load the add-in.
Does anyone know if this is because the plugin is not compatible with the beta? Or is it that the plugin does not even work with their newest version, version 7 because when this thread was created I believe they were not using version 7.
I have tried downloading older versions off of .cnet, but when you run the reflector.exe a message pops up saying newer version available would you like to download it. If you choose no it removes the .exe if you choose yes it says you must visit the website
to download (to pay) and then it deletes the .exe.
Thanks for any help on this
Rob
*Edit*
Something else I am wondering:
I believe the .dll that I want to view the source code was in C or C++ with a slight chance of being C#. If I use .NET Reflector and it was written in C/C++ will it successfully create a C# file?
*edit edit*
Seems there is actual error output:
Unable to load one or more of the requested types. Retrieve the LoaderExceptions property for more information. (ReflectionTypeLoadException)
LoaderExceptions:
Could not load file or assembly 'Reflector, Version=5.0.0.0, Culture=neutral, PublicKeyToken=18ca6bb8dd6a03c3' or one of its dependencies. The located assembly's manifest definition does not match the assembly reference. (Exception from HRESULT: 0x80131040)
(FileLoadException)
That error message repeats 7 more times.
*edit edit edit*
couple of hours of searching I found free stable version 6.5
Here:
http://www.brothersoft.com/red-gate-.net-reflector-284053.html
I downloaded it and tried to use the plugin. Seems to be working. I think the problem might be the fact that version 7 is in beta. Hopefully the problem doesn't exist in final production of version 7.
Cheers! Hope this helps someone else
*edit edit edit edit*
So I think it worked. It generated 2000 files(mostly System.XXXXXX.XXXXX etc..). Does anyone know where I would be able to actually find the code written by programmer who wrote the .dll not the .NET files. Thanks!

View source code directly?

Similar Messages

Maybe you are looking for