Show TOC

Testing Your ImplementationLocate this document in the navigation structure

The test scenario consists of two framing JSP files inside the ParentAppEAR frame and the framedJsp.jsp from the ChildAppEAR application under different circumstances.

Prerequisites
  • You have two AS Java systems, one producer and one consumer. Both systems have implemented SAP Note 2290783 Information published on SAP site.

  • You have enabled the whitelist service on the producer system.

    For more information, see Security Aspects of Web Dynpro for Java.

  • You have downloaded the EAR files from SAP Note 2290783 Information published on SAP site.

    • ParentAppEAR_7.1+.ear

    • ChildAppEAR_7.1+.ear

  • You have deployed the EAR files as follows:

    • ParentAppEAR_7.1+.ear on the producer system

    • ChildAppEAR_7.1+.ear on the consumer system

Scenario Details

The parent application, ParentAppEAR, provides the following JSPs

  • framingJsp_incTag.jsp

    Uses the custom tag for clickjacking protection.

  • framingJsp_noTag.jsp

    Does not include the custom tag.

The JSPs are described in the different test cases.

The child application named ChildAppEAR that contains framedJsp.jsp, which displays text in the browser to prove that the whole process is successful.