You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Richard Buck <ki...@googlemail.com> on 2008/02/04 17:20:50 UTC
Regression with servlet mapping
Hi,
my application maps a servlet like this:
<servlet-mapping>
<servlet-name>FileServlet</servlet-name>
<url-pattern>/files/*</url-pattern>
</servlet-mapping>
The servlet serves files from the file system, and is invoked by appending
the path to the file on disc to the servlet base url, thus:
/localhost/files/c:\temp\pic.png
Under tomcat 6.0.9 this works just fine - the servlet is invoked and the
path info part of the URL comes through as expected. Under tomcat
6.0.14this doesn't work whenever the filename contains a backslash -
the servlet
is not invoked at all, and instead a blank page (not html - just empty data)
is returned. It makes no difference if I manually escape the backslash in
the URL or let the browser do it - the result is the same.
Anyone else seeing this? What changed between 6.0.9 and 6.0.14?
Many thanks,
R
Re: Regression with servlet mapping
Posted by Richard Buck <ki...@googlemail.com>.
That fixed it - many thanks!
R
On Feb 4, 2008 5:30 PM, Christopher Schultz <ch...@christopherschultz.net>
wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Richard,
>
> Richard Buck wrote:
> | Anyone else seeing this? What changed between 6.0.9 and 6.0.14?
>
> Google is your friend:
> http://www.security-database.com/detail.php?cve=CVE-2007-0450
>
> http://tomcat.apache.org/security-6.html#Fixed%20in%20Apache%20Tomcat%206.0.10
> Apache Tomcat - Apache Tomcat 6.x vulnerabilities
>
> Note that there is a system property that will result in the old behavior.
>
> - -chris
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.8 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iEYEARECAAYFAkenS6kACgkQ9CaO5/Lv0PDf3QCeOlYHWQynjE/GeU4zzcACO3P9
> rXoAn1vHyYeOsz+lQUdXAkFoav8pzgEj
> =MjIK
> -----END PGP SIGNATURE-----
>
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
Re: Regression with servlet mapping
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Richard,
Richard Buck wrote:
| Anyone else seeing this? What changed between 6.0.9 and 6.0.14?
Google is your friend:
http://www.security-database.com/detail.php?cve=CVE-2007-0450
http://tomcat.apache.org/security-6.html#Fixed%20in%20Apache%20Tomcat%206.0.10
Apache Tomcat - Apache Tomcat 6.x vulnerabilities
Note that there is a system property that will result in the old behavior.
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEARECAAYFAkenS6kACgkQ9CaO5/Lv0PDf3QCeOlYHWQynjE/GeU4zzcACO3P9
rXoAn1vHyYeOsz+lQUdXAkFoav8pzgEj
=MjIK
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org