[ jetty-Bugs-1210299 ] DefaultServlet in 5.1.3 serves WEB-INF and more

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[ jetty-Bugs-1210299 ] DefaultServlet in 5.1.3 serves WEB-INF and more

SourceForge.net
Bugs item #1210299, was opened at 2005-05-28 09:33
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=107322&aid=1210299&group_id=7322

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Leos Literak (literakl)
Assigned to: Nobody/Anonymous (nobody)
Summary: DefaultServlet in 5.1.3 serves WEB-INF and more

Initial Comment:
I have custom servlet that serves all URLs (mapped as
/). Jetty Default servlet is mapped to serve only
specified subdirectory (/images). That worked fine with
jetty 4.1, but is behaves strangely in jetty 5.1.3.

The specified directory looks like treated like prefix.
version   real file                working URL
4.1         images/logo.gif    /images/logo.gif
5.1.3      images/logo.gif    /images/images/logo.gif

If I open just /images URL in jetty 5.1.3, I see
content of the root
for my web application - including WEB-INF directory!
For example
/images/WEB-INF is accessible!

I attach zip file with small webapp that demonstrates
this behaviour. Try to start it from jetty 4.1 (it
works fine) and from jetty 5.1.3.

(hmm, I cannot submit thisa bugreport. I will try
without attaching).

----------------------------------------------------------------------

You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=107322&aid=1210299&group_id=7322


-------------------------------------------------------
This SF.Net email is sponsored by Yahoo.
Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
Search APIs Find out how you can build Yahoo! directly into your own
Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005
_______________________________________________
jetty-discuss mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/jetty-discuss