JSP V/S Servlets for entry in to an application
1 posts in topic
Flat View  Flat View
TOPIC ACTIONS:
 

Posted By:   Shailendra_Kadre
Posted On:   Thursday, March 6, 2003 02:20 AM

We want to provide a single point entry to our application for obvious securiry reasons. One way to do his can be to give access to to the application through a JSP which calls other beans & JSP based on menu choice.

The other & more adopted way is to provide an entry servlet which processes the incomung requests & delegates to appropriate view and bean.

Which one out of the two approaches is better from secururity point of view & why ?

Re: JSP V/S Servlets for entry in to an application

Posted By:   Lasse_Koskela  
Posted On:   Thursday, March 6, 2003 02:25 AM

Well, the two approaches aren't really that different. The latter only uses an extra layer of abstraction and is actually precompiled into servlet code before actual bytecode compilation.


Anyway, the servlet approach is more appropriate because you can more accurately control what you're doing. This could be implemented as a JSP, but the JSP compiler can include some totally unnecessary stuff into the servlet code and it's definitely more difficult to structure your code within a JSP (referring to JSP method declarations versus regular method declarations).

About | Sitemap | Contact