Geek asks and answers

Grails WEB-INF is available from the application. Deployed application.

In the grails application, you can access WEB-INF content, including all .gsp content, as well as the .class file during deployment.

I am using grails 2.3.5 and deploying war in tomcat 7.

Access files using

http://mydomain.com/static/WEB-INF/web.xml
http://mydomain.com/static/WEB-INF/grails-app/views/anyview.gsp
http://mydomain.com/static/ WEB-INF / grails-app / i18n / messages.properties http://mydomain.com/static/WEB-INF/classes/anyclass.class

Is it possible to disable access to these urls in grails?

+3
source share
1 answer

grails . , css, js, images, WEB-INF, META-INF, .

config.groovy, css, js .

grails.resources.adhoc.includes = ['/images/**','/js/**','/css/**']

:

grails.resources.adhoc.excludes = ['/WEB-INF/**']

WEB-INF.

, . ,

adhoc: grails.resources.adhoc.includes/excludes

+6

More articles:


All Articles