Before enabling this feature upgrade to the latest available versions (older versions contain a critical security vulnerability).
The latest versions containing a fix are:
- for CE users 184.108.40.206 or later downloads
- for PE/EE users 220.127.116.11, 18.104.22.168, 22.214.171.124, 126.96.36.199 or later premium downloads
By default, ZK only searches the class path for the required CWR. By specifying a directory here, ZK will search the directory first and then the class path. This implies that a developer can override the default behavior by providing a file with the same name.
Notice: never put security sensitive files in the directory specified here, since they can be accessed externally.
foo.great and we want to put it to
WEB-INF/cwr, we have to specify the following in
<library-property> <name>org.zkoss.web.util.resource.dir</name> <value>/WEB-INF/cwr</value> </library-property>
You can place
zul.jar when replacing
zul/inp/Textbox.js that is part of
Rather, you could specify this library property as described above, and place the modified version of
Textbox.js under the
/WEB-INF/cwr/js/zul/inp directory. Then, ZK will load
/WEB-INF/cwr/js/zul/inp/Textbox.js you placed rather than the default one in
Notice that if debug-js is turned on, ZK will actually look for
Textbox.src.js rather than
Textbox.js in the above example. Thus, it is suggested to put both files:
/WEB-INF/cwr/js/zul/inp directories. In addition,
Textbox.src.js is suggested to be the readable one (for debugging purpose), while
Textbox.js is the compressed one (for production purpose).
Overriding with Classpath Web Resource Path
So the js files will be packaged into
After doing this, then ZK will load highcharts.js under
WEB-INF/classes/web/ instead of those js in jar.