Hi!

Some emergency. Any help highly appreciated.
The AssetDispatcher in Tapestry 5.3.8 allows harmful requests, reading contents 
from WEB-INF etc.
We currently do not have the time to update to the newest Tapestry version and 
we need to to something quick, right now.
So I would like to ask how the current AssetDispatcher can be replaced by a 
more secure version?
What needs to be done in the application module class. Tried there various 
things but did not make it work.
Does anyone maybe have already a patched class handy?

Best Regards,
Reinhold


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org

Reply via email to