How to forbid all access to a URL

From Resin 3.0

Revision as of 17:45, 15 January 2009 by Ferg (Talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search


With Resin 4.0, you can deny all access to a set of URLs, i.e. allowing behavior just like WEB-INF and META-INF

<web-app xmlns="http://caucho.com/ns/resin"
                    xmlns:sec="urn:java:com.caucho.security">

   <sec:Deny>
      <sec:url-pattern>/hidden/*</sec:url-pattern>
      <sec:url-pattern>/more-hidden/*</sec:url-pattern>
   </sec:Deny>

</web-app>
Personal tools