You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@tomcat.apache.org by Taso Lyristis <ta...@zebware.com> on 2001/01/17 19:56:00 UTC

bug with url-pattern in security-constraint

This was posted to tomcat-user about a week ago, with no response...

In Tomcat-3.2.1, I protecting the following url pattern:

<url-pattern>/config/*</url-pattern>

This works.  However, there is a JSP at the root of my context named
config.jsp which is also getting constrained, and I don't want this. 
Apparently, Tomcat is treating my "/config/*" string as "/config*".

Is this a bug?

To work around this, I've added explicit (non-wildcard) url patterns for
all of my resources under /config/, but I really don't like this :)