http://ocpsoft.com/support/topic/limit-access-to-jsf-files

I know "the answer", but what is "our answer"?

Shane or Brian, would either of you like to respond to this? Does Seam Faces do this already with the ViewConfig? I wasn't sure if we actually blocked direct access to the /faces/ mapped URLs or not. I don't think so, right? We should probably look in to that.

--
Lincoln Baxter, III
http://ocpsoft.com
http://scrumshark.com
"Keep it Simple"