apachejackrabbitjcrslingjsr170

How to set jsp pages unaccessible from addressing via browsers in Apache Sling?

I am developing a sling WCMS.
When I call address [e.g. 'http://localhost:8080/apps/bcms/pages/test.jsp'] of a page in the browser, a save dialog box will appear and ask to save jsp file. How to prevent jsp pages accessible via direct addressing?

Solution

  • Just remove the permissions for anonymous. The script resolution and execution runs with the script user.