Re: pathTranslated and pathInfo... More unsafe paths

2001-03-20 Thread christopher hull
Craig R. McClanahan wrote: > > On Wed, 14 Mar 2001, christopher hull wrote: > > >> Wow! Thanks for the quick response. >> >> The problem it turns out has nothing to do with spaces. When >> getResourceAsStream() can't find a resource, it dis

Re: pathTranslated and pathInfo... More unsafe paths

2001-03-14 Thread christopher hull
tell getResourceAsStream not to be? Thanks; -Chris Craig R. McClanahan wrote: > > On Wed, 14 Mar 2001, christopher hull wrote: > > >> But wait... >> /WEB-INF/../../env.xml >> is inside of >> /WEB-INF/../env.xml >> (see example below) >> > >

pathTranslated and pathInfo... More unsafe paths

2001-03-14 Thread christopher hull
:\Jupiter\tomcat\webapps\dir1\dir2\dir3 /WEB-INF/../../env.xml > Any ideas why is that? > Interestingly, when the parameter envFile has the value /WEB-INF/../env.xml > Tomcat has no problems reading the file. > This is on Tomcat 3.2/Wintel. > TIA -- Christopher Hull Engin