Home/ Questions/Q 181971
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-11T14:51:27+00:00

I’m new to Icefaces and Facelets both, but I’m using them on a new

  • 0

I’m new to Icefaces and Facelets both, but I’m using them on a new project. I’ve got everything working configured and working fine. However, when I visit mywebapp/file.xhtml, the entire facelets template source comes up in my browser. How could I hide this to prevent users from viewing my server-side templates?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Put all templates into WEB-INF/someDirectory/templates.

    Then according to the facelets documentation put this inside your web.xml for all other xhtml files:

    <security-constraint>     <display-name>Restrict XHTML Documents</display-name>     <web-resource-collection>         <web-resource-name>XHTML</web-resource-name>         <url-pattern>*.xhtml</url-pattern>     </web-resource-collection>     <auth-constraint>         <description>Only Let 'developer's access XHTML pages</description>         <role-name>someone</role-name>     </auth-constraint> </security-constraint>
    • 0