[ajug-members] JSP justification??

[Jason Kretzer/STAR BASE Consulting Inc.]

Don,

1.  Another way of securing the JSP is to have it look in the session for 
a particular value that is placed in the session by an earlier servlet. 
Have the jsp throw an error if it is not there.  I admit it is not quite 
as good as J2EE security but it does help...

2.  google for 'round trip processing jsp' minus the quotes.  this is one 
way that jsp's can be reused.

3.  Fifth Third Bank(Cinicinnati) uses them.

Hope this helps.

-Jason





Lykins Don H Contr AFSAC/ITS <Don.Lykins at wpafb.af.mil> 
Sent by: ajug-members-bounces at ajug.org
07/20/2004 09:00 AM
Please respond to
"General AJUG membership forum \(100-200 messages/month\)" 
<ajug-members at ajug.org>


To
"'ajug-members at ajug.org'" <ajug-members at ajug.org>
cc

Subject
[ajug-members] JSP justification??






I have been asked to justify my request to use JSP's.

The main issue appears to be with security..

1. how is everyone securing their JSP's
                  --- so you can't type the URL's directly.

2.  Do JSP's facilitate re-use? if so, how

3. Any large financial institutions using JSP's for secure transactions?



Don Lykins
AFSAC
937-257-4295 x4539
don.lykins at wpafb.af.mil


_______________________________________________
ajug-members mailing list
ajug-members at ajug.org
http://www.ajug.org/mailman/listinfo/ajug-members

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.ajug.org/pipermail/ajug-members/attachments/20040720/70e4cefe/attachment.html