You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@tomcat.apache.org by BugRat Mail System <to...@cortexity.com> on 2001/01/11 15:08:56 UTC

BugRat Report #741 has been filed.

Bug report #741 has just been filed.

You can view the report at the following URL:

   <http://znutar.cortexity.com/BugRatViewer/ShowReport/741>

REPORT #741 Details.

Project: Tomcat
Category: Bug Report
SubCategory: New Bug Report
Class: swbug
State: received
Priority: high
Severity: serious
Confidence: public
Environment: 
   Release: 2.3.1
   JVM Release: 1.2.2
   Operating System: Linux
   OS Release: 2.4.0
   Platform: x86

Synopsis: 
url-pattern in security constraint broken

Description:
When defining a security constraint, the following 
url-pattern: "/foobar/*", matches not only resources 
under /foobar/, but also /foobar.jsp at the root of the 
context, which is incorrect.