Description
The netui-blank webapp (after the fix for http://issues.apache.org/jira/browse/BEEHIVE-735) and netui-samples both have page flow source files (Controller.java) mixed into the web content directories. They must also have a Servlet Filter that prevents the Java source from being visible from the browser.
Repro:
- Build/deploy netui-samples.
- Hit /netui-samples/Controller.java in the browser.
EXPECTED: see a Forbidden error in the browser (with no source code displayed)
ACTUAL: see the page flow source code