Re: JSP displayed in the browser !!!

["Chris Rehm" <javadisciple@xxxxxxxxxxxxx>]

JSP displayed in the browser !!!

----- Original Message -----
From: DUCRET Gilles (GVA)
To: JAVA400-L (E-mail)
Sent: Friday, July 13, 2001 2:10 AM
Subject: JSP displayed in the browser !!!


>"Do you want to: Open the file from its current location, Save it to the
disk?"
>If you say open you can get the content of the JSP (used notepad to open
it)

This is usually an indication that the browser does not recognize the file
extension of the file being sent to it or that some other tool has
registered with the browser to handle that file extension. If this same
problem is being seen from every browser connected to your server, that
would indicate your server is sending using a file extension that us new and
different.

It sort of appears that someone has accidentally made a change to the link
you clicked on to send the server code instead of executing it.

>If you say save you can save the JSP file to the disk
>We are still using WAS 3.02.
>What does this can come from?
>This is somewhere a security issue, since some server code can be displayed
to the >user!!!!!!!

Always a risk.

>Any idea?
>Gilles Ducret
Chris Rehm
javadisciple@earthlink.net
If you believe that the best technology wins the
marketplace, you haven't been paying attention.


+---
| This is the JAVA/400 Mailing List!
| To submit a new message, send your mail to JAVA400-L@midrange.com.
| To subscribe to this list send email to JAVA400-L-SUB@midrange.com.
| To unsubscribe from this list send email to JAVA400-L-UNSUB@midrange.com.
| Questions should be directed to the list owner: joe@zappie.net
+---