You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@beehive.apache.org by "Rich Feit (JIRA)" <be...@incubator.apache.org> on 2005/05/15 18:51:05 UTC

[jira] Created: (BEEHIVE-736) page flow source code is visible from the browser in netui-samples

page flow source code is visible from the browser in netui-samples
------------------------------------------------------------------

         Key: BEEHIVE-736
         URL: http://issues.apache.org/jira/browse/BEEHIVE-736
     Project: Beehive
        Type: Bug
  Components: NetUI  
    Versions: V1    
    Reporter: Rich Feit
    Priority: Critical
     Fix For: V1


The netui-blank webapp (after the fix for http://issues.apache.org/jira/browse/BEEHIVE-735) and netui-samples both have page flow source files (Controller.java) mixed into the web content directories.  They must also have a Servlet Filter that prevents the Java source from being visible from the browser.

Repro:
    - Build/deploy netui-samples.
    - Hit /netui-samples/Controller.java in the browser.

EXPECTED: see a Forbidden error in the browser (with no source code displayed)
ACTUAL: see the page flow source code

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


[jira] Assigned: (BEEHIVE-736) page flow source code is visible from the browser in netui-samples

Posted by "Rich Feit (JIRA)" <be...@incubator.apache.org>.
     [ http://issues.apache.org/jira/browse/BEEHIVE-736?page=all ]

Rich Feit reassigned BEEHIVE-736:
---------------------------------

    Assign To: Rich Feit

> page flow source code is visible from the browser in netui-samples
> ------------------------------------------------------------------
>
>          Key: BEEHIVE-736
>          URL: http://issues.apache.org/jira/browse/BEEHIVE-736
>      Project: Beehive
>         Type: Bug
>   Components: NetUI
>     Versions: V1
>     Reporter: Rich Feit
>     Assignee: Rich Feit
>     Priority: Critical
>      Fix For: V1

>
> The netui-blank webapp (after the fix for http://issues.apache.org/jira/browse/BEEHIVE-735) and netui-samples both have page flow source files (Controller.java) mixed into the web content directories.  They must also have a Servlet Filter that prevents the Java source from being visible from the browser.
> Repro:
>     - Build/deploy netui-samples.
>     - Hit /netui-samples/Controller.java in the browser.
> EXPECTED: see a Forbidden error in the browser (with no source code displayed)
> ACTUAL: see the page flow source code

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


[jira] Closed: (BEEHIVE-736) page flow source code is visible from the browser in netui-samples

Posted by "Alejandro Ramirez (JIRA)" <be...@incubator.apache.org>.
     [ http://issues.apache.org/jira/browse/BEEHIVE-736?page=all ]
     
Alejandro Ramirez closed BEEHIVE-736:
-------------------------------------


Verified Fixed w/ SVN REV: 170484
Executed Repro steps for both netui-samples and netui-blank.  Now *.java files are not web addressable.

> page flow source code is visible from the browser in netui-samples
> ------------------------------------------------------------------
>
>          Key: BEEHIVE-736
>          URL: http://issues.apache.org/jira/browse/BEEHIVE-736
>      Project: Beehive
>         Type: Bug
>   Components: NetUI
>     Versions: V1
>     Reporter: Rich Feit
>     Assignee: Alejandro Ramirez
>     Priority: Critical
>      Fix For: V1

>
> The netui-blank webapp (after the fix for http://issues.apache.org/jira/browse/BEEHIVE-735) and netui-samples both have page flow source files (Controller.java) mixed into the web content directories.  They must also have a Servlet Filter that prevents the Java source from being visible from the browser.
> Repro:
>     - Build/deploy netui-samples.
>     - Hit /netui-samples/Controller.java in the browser.
> EXPECTED: see a Forbidden error in the browser (with no source code displayed)
> ACTUAL: see the page flow source code

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


[jira] Resolved: (BEEHIVE-736) page flow source code is visible from the browser in netui-samples

Posted by "Rich Feit (JIRA)" <be...@incubator.apache.org>.
     [ http://issues.apache.org/jira/browse/BEEHIVE-736?page=all ]
     
Rich Feit resolved BEEHIVE-736:
-------------------------------

     Assign To: Alejandro Ramirez  (was: Rich Feit)
    Resolution: Fixed

Fixed with revision 170267.

> page flow source code is visible from the browser in netui-samples
> ------------------------------------------------------------------
>
>          Key: BEEHIVE-736
>          URL: http://issues.apache.org/jira/browse/BEEHIVE-736
>      Project: Beehive
>         Type: Bug
>   Components: NetUI
>     Versions: V1
>     Reporter: Rich Feit
>     Assignee: Alejandro Ramirez
>     Priority: Critical
>      Fix For: V1

>
> The netui-blank webapp (after the fix for http://issues.apache.org/jira/browse/BEEHIVE-735) and netui-samples both have page flow source files (Controller.java) mixed into the web content directories.  They must also have a Servlet Filter that prevents the Java source from being visible from the browser.
> Repro:
>     - Build/deploy netui-samples.
>     - Hit /netui-samples/Controller.java in the browser.
> EXPECTED: see a Forbidden error in the browser (with no source code displayed)
> ACTUAL: see the page flow source code

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira