>> >org.apache.naming.resources.DirContextURLConnection.getInputStream(DirContextURLConnection.java:344) > >> >> at java.net.URL.openStream(URL.java:793) > > > Well, that's exactly the same. Where do you think that weird URL > connection goes ?? (hint: to the aforementioned FileDirContext, through > some classloader binding)
Well it's my initial diggs in TC 4.1.x, let me some time to discover it. > The place where it gets rejected should be the FileDirContext.file() > method, as far as I can remember. FileDirContext.file() is used to get webapps/ROOT/web.xml ref and validate access, but the external entity is grabbed from Digester so outside FileDirContext control (from my debug analyze). -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
