Simon Brown, Sam Dalton, Daniel Jepp, David Johnson, Sing Li, and Matt Raible Edited by Kevin Mukhar Pro JSP 2 Fourth Edition Pro JSP 2, Fourth Edition Copyright (c) 2005 by Simon Brown, Sam Dalton, Daniel Jepp, Dave Johnson, Sing Li, and Matt Raible All rights reserved. No part of this work may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage or retrieval system, without the prior written permission of the copyright owner and the publisher. ISBN (pbk): 1-59059-513-0 Printed and bound in the United States of America 9 8 7 6 5 4 3 2 1 Trademarked names may appear in this book. Rather than use a trademark symbol with every occurrence of a trademarked name, we use the names only in an editorial fashion and to the benefit of the trademark owner, with no intention of infringement of the trademark. Lead Editors: Steve Anglin and Kevin Mukhar Technical Reviewers: Scott Davis and Dilip Thomas Editorial Board: Steve Anglin, Dan Appleman, Ewan Buckingham, Gary Cornell, Tony Davis, Jason Gilmore, Jonathan Hassell, Chris Mills, Dominic Shakeshaft, Jim Sumser Associate Publisher: Grace Wong Project Manager: Beckie Brand Copy Edit Manager: Nicole LeClerc Copy Editor: Sharon Wilkey Assistant Production Director: Kari Brooks-Copony Production Editor: Ellie Fountain Compositor: ContentWorks Proofreader: Sue Boshers Indexer: Julie Grady Artist: Kinetic Publishing Services, LLC Interior Designer: Van Winkle Design Group Cover Designer: Kurt Krames Manufacturing Director: Tom Debolski Distributed to the book trade worldwide by Springer-Verlag New York, Inc., 233 Spring Street, 6th Floor, New York, NY 10013. Phone 1-800-SPRINGER, fax 201-348-4505, e-mail orders-ny@springer-sbm.com, or visit http://www.springeronline.com. For information on translations, please contact Apress directly at 2560 Ninth Street, Suite 219, Berkeley, CA 94710. Phone 510-549-5930, fax 510-549-5939, e-mail info@apress.com, or visit http://www.apress.com. The information in this book is distributed on an as is basis, without warranty. Although every precaution has been taken in the preparation of this work, neither the author(s) nor Apress shall have any liability to any person or entity with respect to any loss or damage caused or alleged to be caused directly or indirectly by the information contained in this work. The source code for this book is available to readers at http://www.apress.com in the Source Code section. Contents at a Glance About the Authors ... xvii About the Editor ... xxi About the Technical Reviewers ... xxiii Acknowledgments ... xxv Introduction ... xxvii CHAPTER 1 The Anatomy of a JavaServer Page ... 1 CHAPTER 2 Servlets and Deployment ... 45 CHAPTER 3 The JavaServer Pages Expression Language ... 95 CHAPTER 4 JavaServer Pages Standard Tag Library ... 135 CHAPTER 5 JavaServer Faces ... 183 CHAPTER 6 Tag Files and Simple Tags ... 251 CHAPTER 7 Classic Tags ... 289 CHAPTER 8 Custom Tag Advanced Features and Best Practices ... 327 CHAPTER 9 Data Access Options for Web Applications ... 359 CHAPTER 10 Introduction to Filtering ... 399 CHAPTER 11 Advanced Filtering Techniques ... 433 CHAPTER 12 Security in Web Applications ... 469 CHAPTER 13 Improving Web-Application Performance and Scalability ... 515 CHAPTER 14 Web-Application Design and Best Practices ... 535 CHAPTER 15 Using Struts, XDoclet, and Other Tools ... 571 APPENDIX A JavaServer Pages Syntax Reference ... 633 APPENDIX B JSP Implicit Objects ... 653 INDEX ... 671 iii