Re: [jetty-dev] Regression Issue with Slash for getResourceAsStream

[Greg Wilkins <gregw@xxxxxxxxxxx>]

Young,

we are constantly fighting such aliasing of resources.   Allowing // to be treated as / is just asking for security problems.

cheers

On 23 May 2014 15:54, Young Gu <hyysguyang@xxxxxxxxx> wrote:

Hello,

Seems there is a regression issue with getResourceAsStream, it works well with Jetty 8.x when the path include double slash, but it doesn’t work for 9.x.

For example, when run on Jetty 8.x, you can get the file inputstream with servletContext.getResourceAsStream("/WEB-INF//test/test.html" , but you will get null for 9.x.

WDYT?

--

Best Regards,
-------------
Young Gu | Senior Software Engineer | http://www.infor.com

_______________________________________________
jetty-dev mailing list
jetty-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/jetty-dev