You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2017/02/02 07:00:08 UTC
[Bug 60667] Information disclosure vulnerability leaking files from
WEB-INF and META-INF
https://bz.apache.org/bugzilla/show_bug.cgi?id=60667
--- Comment #2 from Josh Soref <ap...@soref.com> ---
mark: did you test on Windows? the `.` behavior is a Windows thing. Case
folding could also happen on macOS.
(I'm not endorsing the bug, just guessing about how this could be. And I don't
have a tomcat instance handy to test.)
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org