Hello all and thanks in advance for any and all help!
I have IIS 5.0 setup and integrated with Tomcat such that all jsps and servlets for my web application will be passed off to Tomcat for processing, yet all .gifs, html pages, etc. are processed through IIS...
In my config file, I have something like:
/cars/*.jsp
/cars/servlet/*
to denote that any .jsp or servlet requests on the cars web application. So if someone goes to they will get passed off to Tomcat and get the login page. However, if someone changes the URL to IIS will ask the user if they want to save the .jsp file giving away my code.
Is there a way to just have IIS display a page not found error or something? What is the best way to handle this?? They only get to our URLs through other links, so if someone follows this path of changing the case, then they are doing it for malicious reasons and we'd like to prevent them from seeing code.
Thanks for all of your help!!!
Keith
I have IIS 5.0 setup and integrated with Tomcat such that all jsps and servlets for my web application will be passed off to Tomcat for processing, yet all .gifs, html pages, etc. are processed through IIS...
In my config file, I have something like:
/cars/*.jsp
/cars/servlet/*
to denote that any .jsp or servlet requests on the cars web application. So if someone goes to they will get passed off to Tomcat and get the login page. However, if someone changes the URL to IIS will ask the user if they want to save the .jsp file giving away my code.
Is there a way to just have IIS display a page not found error or something? What is the best way to handle this?? They only get to our URLs through other links, so if someone follows this path of changing the case, then they are doing it for malicious reasons and we'd like to prevent them from seeing code.
Thanks for all of your help!!!
Keith
