https://issues.apache.org/bugzilla/show_bug.cgi?id=4227
Mark Thomas <ma...@apache.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|REOPENED |RESOLVED
Resolution| |FIXED
--- Comment #6 from Mark Thomas <ma...@apache.org> 2010-10-20 18:33:00 EDT ---
This is fixed in 7.0.x, 6.0.x (and I think 5.5.x) since Tomcat normalises the
request URI before calculating the contextPath, servletPath and pathInfo. I
have therefore removed the todo (in 7.0.x) re making the checks less draconian.
I have left the checks for "." and ".." in place just to be on the safe side
but they should never be triggered.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
