Description YGN Ethical Hacker Group 2010-10-29 11:23:49 EDT

Build Identifier: 20100917-0705

Apology in advance if I wasted your time, guys. The reason to report bug is that I couldn't figure it out because of cross-application issues with Jetty server. It's also been reported to Jetty Project Lead who said the problem might be because of an eclipse framework used to serve the static content and is unrelated to any jetty problems.

I'd like to know whether this flaw is due to Jetty or Eclipse so that we, developers, can avoid such problems in our own applications.





Reproducible: Always

Steps to Reproduce:
1. Open Eclipse's help content from the Eclipse GUI
2. Note its HTTP server port
3. Request the following URLs
   (If the HTTP port is 2490)
  http://localhost:2490/help/advanced/tocView.jsp\
  http://localhost:2490/help/advanced/search.jsp%5C

4. You will see the full source code.