You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by ma...@apache.org on 2001/02/14 04:48:09 UTC
cvs commit: jakarta-tomcat/src/share/org/apache/tomcat/request AccessInterceptor.java
marcsaeg 01/02/13 19:48:09
Modified: src/share/org/apache/tomcat/request Tag: tomcat_32
AccessInterceptor.java
Log:
If two url-patterns were specified inside a security constraint such as
<url-pattern>/abc123/*</url-pattern>
and
<url-pattern>/abc/*</url-pattern>
then AccessInterceptor would incorrectly match the url /abc123 with both patterns.
PR: 567
Submitted by: akerr@fluid.com
Revision Changes Path
No revision
No revision
1.12.2.5 +1 -1 jakarta-tomcat/src/share/org/apache/tomcat/request/Attic/AccessInterceptor.java
Index: AccessInterceptor.java
===================================================================
RCS file: /home/cvs/jakarta-tomcat/src/share/org/apache/tomcat/request/Attic/AccessInterceptor.java,v
retrieving revision 1.12.2.4
retrieving revision 1.12.2.5
diff -u -r1.12.2.4 -r1.12.2.5
--- AccessInterceptor.java 2000/08/24 21:50:51 1.12.2.4
+++ AccessInterceptor.java 2001/02/14 03:48:09 1.12.2.5
@@ -321,7 +321,7 @@
switch( ct.getMapType() ) {
case Container.PREFIX_MAP:
- return path.startsWith( ctPath.substring(0, ctPathL - 2 ));
+ return path.startsWith( ctPath.substring(0, ctPathL - 1 ));
case Container.EXTENSION_MAP:
return ctPath.substring( 1 ).equals( URLUtil.getExtension( path ));
case Container.PATH_MAP: