Uploaded image for project: 'XWiki Commons'
  1. XWiki Commons
  2. XCOMMONS-2347

ServletEnvironment#getResource should not return URL with relative path component

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Major
    • 14.0-rc-1
    • 13.10.2
    • Environment
    • None
    • Unit
    • Unknown
    • N/A
    • N/A

    Description

      We should always ensure that the URLs returned by ServletEnvironment#getResource are normalized. We don't perform any check on that right now.

      Attachments

        Issue Links

          blocks

          Task - A task that needs to be done. XWIKI-18152 Upgrade to Jetty 10 for the standalone packaging

          • Major - Major loss of function.
          • Closed
          causes

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-19349 It's possible to access a classloader file out of the "templates/" prefix through template manager

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed

          Activity

            People

              surli Simon Urli
              surli Simon Urli
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: