[Bug 64089] Resource paths resolve symlinks

[bu...@apache.org]

https://bz.apache.org/bugzilla/show_bug.cgi?id=64089

--- Comment #1 from Mark Thomas <ma...@apache.org> ---
I'm afraid I am going to take a different view.

The behaviour you were relying on was a bug and, now that bug has been fixed,
the behaviour has changed.

For reference the change was as a result of this thread:
https://tomcat.markmail.org/thread/gonkmfw5acognpy3

Further, the entity reference in the web.xml shown in the example accessing a
location outside of the root of the web application. That goes against the
general principal that web applications are meant to be self-contained (and
access additional resources via JNDI).

I'm wondering if it is possible to map these external xml files into a web
application via http://tomcat.apache.org/tomcat-9.0-doc/config/resources.html

There have been some changes recently that might impact on this so I'll do some
testing locally and report back.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org