This happened to be one of the items on my todo list, so here goes.<div><br></div><div>Brian, I saw in Jose's example that he used *.xhtml as the Faces Servlet mapping. I had never thought of that before. I guess I assumed that the Servlet mapping had to be different than the template suffix. So it turns out this is an elegant solution to preventing direct access to *.xhtml files without going through the Faces Servlet. Could you add this recommendation to the Seam Faces documentation. That is, unless someone sees something flawed about this approach.</div>
<div><br></div><div>-Dan</div><div><br><div class="gmail_quote">On Wed, May 25, 2011 at 10:52, Lincoln Baxter, III <span dir="ltr"><<a href="mailto:lincolnbaxter@gmail.com">lincolnbaxter@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><a href="http://ocpsoft.com/support/topic/limit-access-to-jsf-files" target="_blank">http://ocpsoft.com/support/topic/limit-access-to-jsf-files</a><br>
<br>I know "the answer", but what is "our answer"?<br><br>Shane or Brian, would either of you like to respond to this? Does Seam Faces do this already with the ViewConfig? I wasn't sure if we actually blocked direct access to the /faces/ mapped URLs or not. I don't think so, right? We should probably look in to that.<br clear="all">
<font color="#888888">
<br>-- <br>Lincoln Baxter, III<br><a href="http://ocpsoft.com" target="_blank">http://ocpsoft.com</a><br><a href="http://scrumshark.com" target="_blank">http://scrumshark.com</a><br>"Keep it Simple"<br>
</font><br>_______________________________________________<br>
seam-dev mailing list<br>
<a href="mailto:seam-dev@lists.jboss.org">seam-dev@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/seam-dev" target="_blank">https://lists.jboss.org/mailman/listinfo/seam-dev</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br><div>Dan Allen</div>Principal Software Engineer, Red Hat | Author of Seam in Action<br>Registered Linux User #231597<br><br><div><a href="http://www.google.com/profiles/dan.j.allen#about" target="_blank">http://www.google.com/profiles/dan.j.allen#about</a><br>
<a href="http://mojavelinux.com" target="_blank">http://mojavelinux.com</a><br><a href="http://mojavelinux.com/seaminaction" target="_blank">http://mojavelinux.com/seaminaction</a><br></div><br>
</div>