Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

You cannot point h:graphicImage at a private server filesystem path and have the browser load it. The browser requests a URL, so the application must expose the image through HTTP. A common solution is a servlet that resolves a safe file beneath a configured image directory and streams its bytes. If you use PrimeFaces, p:graphicImage can also stream binary data such as an InputStream.

Why an absolute server path does not work

A JSF image component ultimately gives the browser a URL to request. A path such as /var/app/images/test.jpg names a location on the server; it is not an HTTP address the browser can fetch. JSF resource components do not publish arbitrary filesystem paths by themselves.

The bridge is an HTTP endpoint: JSF renders its URL, and server-side code reads the external file and returns an image response. DZone’s example uses a servlet for this purpose: https://www.dzone.com/articles/display-images-non-project.

Serve the image through a servlet

Map a servlet to a URL pattern for image requests, then use that URL in the JSF page. For example, the DZone approach maps /images/dynamic/* to DynamicImageServlet and requests an image by identifier:

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Sale
Philips 24 Inch Computer Monitor FHD 100Hz VA VESA Flicker-Free, 241V8LB
  • CRISP CLARITY: This 23.8″ Philips V line monitor delivers crisp Full HD 1920x1080 visuals. Enjoy movies, shows and videos with remarkable detail
  • INCREDIBLE CONTRAST: The VA panel produces brighter whites and deeper blacks. You get true-to-life images and more gradients with 16.7 million colors
  • THE PERFECT VIEW: The 178/178 degree extra wide viewing angle prevents the shifting of colors when viewed from an offset angle, so you always get consistent colors
  • WORK SEAMLESSLY: This sleek monitor is virtually bezel-free on three sides, so the screen looks even bigger for the viewer. This minimalistic design also allows for seamless multi-monitor setups that enhance your workflow and boost productivity
  • A BETTER READING EXPERIENCE: For busy office workers, EasyRead mode provides a more paper-like experience for when viewing lengthy documents
<servlet-mapping>
    <servlet-name>DynamicImageServlet</servlet-name>
    <url-pattern>/images/dynamic/*</url-pattern>
</servlet-mapping>
<h:graphicImage value="/images/dynamic/?file=test.jpg" />

In doGet(), read the request parameter, resolve the requested file under a configured image root, and write the file bytes to the response. The servlet—not the JSF tag—has access to the server filesystem.

Validate the request before opening a file

Do not use a request parameter as a filesystem path without validation. The example’s unrestricted file parameter illustrates the mechanism, not a safe production policy. Treat the parameter as an identifier within an approved directory, and reject traversal attempts, absolute paths, escaping symlinks, and extensions you do not serve.

Rank #2
Philips 22 Inch Computer Monitor FHD 100Hz VA VESA Flicker-Free, 221V8LB
  • CRISP CLARITY: This 22 inch class (21.5″ viewable) Philips V line monitor delivers crisp Full HD 1920x1080 visuals. Enjoy movies, shows and videos with remarkable detail
  • 100HZ FAST REFRESH RATE: 100Hz brings your favorite movies and video games to life. Stream, binge, and play effortlessly
  • SMOOTH ACTION WITH ADAPTIVE-SYNC: Adaptive-Sync technology ensures fluid action sequences and rapid response time. Every frame will be rendered smoothly with crystal clarity and without stutter
  • INCREDIBLE CONTRAST: The VA panel produces brighter whites and deeper blacks. You get true-to-life images and more gradients with 16.7 million colors
  • THE PERFECT VIEW: The 178/178 degree extra wide viewing angle prevents the shifting of colors when viewed from an offset angle, so you always get consistent colors
  • Resolve the candidate against the configured image root and verify that the normalized result remains beneath that root.
  • Reject symlinks that resolve outside the root, and allow only the image formats the application intends to serve.
  • Confirm the result is a regular, readable file before streaming it.
  • Set an accurate Content-Type from a trusted allow-list or validated file content; do not trust a user-controlled extension by itself.
  • Return HTTP 404 when the requested image is absent, and do not include server filesystem paths in error responses.

Stream the response safely

Use buffered I/O and close the input and response streams reliably. Avoid allocating a byte array based on InputStream.available(); that method is not a reliable measure of a large file’s total size. Add authorization for private images and choose cache headers according to the content’s sensitivity. The DZone example establishes the servlet pattern, but does not specify content-type handling, validation, authorization, caching, or range support; those details must be designed for your application.

Use PrimeFaces when binary streaming fits

PrimeFaces p:graphicImage extends standard h:graphicImage with support for displaying binary data such as an InputStream. PrimeFaces identifies database-backed and dynamically generated images as use cases, and its component can handle streaming that might otherwise require a custom servlet: PrimeFaces GraphicImage VDL documentation.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Sale
Dell 24 Monitor - SE2426H - 23.8-inch FHD (1920x1080) 144Hz 1ms Display, in-Plane Switching (IPS) Technology, AMD FreeSync™, TÜV 3-Star 2X HDMI, Tilt
  • Clear visuals. Fluid motion: A 144Hz refresh rate and 1ms MPRT deliver smooth, tear‑free motion across work, gaming, and streaming for clearer, more fluid viewing.
  • Eye comfort: TÜV Rheinland 3‑star* certification reduces harmful blue light while preserving stunning color quality without compromise. *TÜV Rheinland 3-star eye comfort certification.
  • Wide viewing angle: Get consistent views across a wide 178° /178° viewing angle.
  • In-Plane Switching (IPS): See excellent color accuracy and consistency across wide viewing angles with In-plane Switching (IPS) technology.
  • Ultra-thin bezels: Maximize your viewing experience with thin bezels.

The VDL documents value as binary data to stream or a context-relative path; url is an alias for value. It also documents stream to choose streamed output or data-URI/base64 rendering in supported cases: PrimeFaces GraphicImage VDL attributes.

Choose this route when a backing bean can safely resolve an approved image and provide its stream. A dedicated servlet is a better fit when you need a stable endpoint independent of a component, explicit authorization, or response behavior such as download headers. Either approach still needs safe file resolution and appropriate access controls.

Rank #4
Sale
Samsung 27" Essential S3 (S36GD) Series FHD 1800R Curved Computer Monitor
  • CURVED FOR ENHANCED ENGAGEMENT: An immersive viewing experience with a curved monitor that wraps more closely around your field of vision; It creates a wider view, enhancing depth perception and minimizing peripheral distraction
  • SMOOTH PERFORMANCE FOR SEAMLESS CONTENT: Stay in the action when playing games, watching videos, or working on creative projects; The 100Hz refresh rate reduces lag and motion blur so you don't miss a thing in fast-paced moments¹
  • MORE GAMING POWER: Gain the edge with optimizable game settings; Color and image contrast can be adjusted to see scenes more vividly and spot enemies hiding in the dark; Game Mode adjusts any game to fill the screen so you can view every detail²
  • KEEP IT EASY ON THE EYES: Care for your eyes and stay comfortable, even during long sessions; Advanced eye comfort technology certified by TÜV reduces eye strain by minimizing blue light and reducing irritating screen flicker²
  • INCREASED VERSATILITY: Connect to more; Plug devices straight into your monitor for increased flexibility, making your computing environment even more convenient
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Keep the image directory separate from the deployed app when needed

Store uploads or operational images outside the application deployment directory if they need to survive redeployments. Configure the server-side image root explicitly, then make the servlet or backing bean resolve only approved identifiers against it. The browser should receive the endpoint URL, never the machine’s private filesystem location.

Best Value
Sale
Sceptre New 22-Inch Gaming Monitor, FHD 1080p, Up to 144Hz, HDMI, DisplayPort, Built-in Speakers, Machine Black (E225W-FW144 Series, 2026)
  • 【INTEGRATED SPEAKERS】Whether you're at work or in the midst of an intense gaming session, our built-in speakers provide rich and seamless audio, all while keeping your desk clutter-free.
  • 【EASY ON THE EYES】 Protect your eyes and enhance your comfort with Blue-Light Shift technology. This feature reduces harmful blue light emissions from your screen, helping to alleviate eye strain during long hours of use and promoting healthier viewing habits.
  • 【WIDEN YOUR PERSPECTIVE】Our sleek minimal bezel design ensures undivided attention. The nearly bezel-free display seamlessly connects in a dual monitor arrangement, delivering an unobstructed view that lets you focus on more at once, completely distraction-free.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.