You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@tomcat.apache.org by David Soroko <da...@mannanetwork.com> on 2001/03/13 13:52:36 UTC

Unsafe path ?

Hi all

>From within a servlet I am trying to read a file in the following way
    getServletContext().getResourceAsStream(getInitParameter("envFile"));

When the parameter envFile has the value /WEB-INF/../../env.xml
I am getting the following message from Tomcat:
    Unsafe path D:\Jupiter\tomcat\webapps\dir1\dir2\dir3
/WEB-INF/../../env.xml

Any ideas why is that?

Interestingly, when the parameter envFile has the value /WEB-INF/../env.xml
Tomcat has no problems reading the file.

This is on Tomcat 3.2/Wintel.

TIA

--

============================================
David Soroko
mailto:davids@mannanetwork.com
http://www.geocities.com/SiliconValley/Campus/1628/
Group Manager, Core Technologies
Manna Inc.
============================================