Is the WEB-INF file in the CLASSPATH of a Java Web application?
views:
1813answers:
2
+13
A:
I'm assuming you're referring to the /WEB-INF directory in the root of the web application folder structure.
No it's not in the classpath.
/WEB-INF/classes is though, and so are the JARs in /WEB-INF/lib.
Jack Leow
2009-04-27 15:03:06
+2
A:
Additionally files in WEB-INF are protected against being requested by the web-container, i.e. they are invisible to the outside world.
Thorbjørn Ravn Andersen
2009-04-27 15:13:13
Unless you forward the request (although BEA had a broken implementation of this many years ago).
Tom Hawtin - tackline
2009-04-27 15:37:18
You can almost always circumvent protection.
Thorbjørn Ravn Andersen
2010-02-09 16:43:23