https://issues.apache.org/bugzilla/show_bug.cgi?id=51624

--- Comment #10 from Pid <bugzi...@pidster.com> 2011-08-09 08:10:54 UTC ---
> ...as i see it, a relative path is one that is resolvable generally against an
> URI or File, which is the case of "" and ".", both valid paths denoting the
> "current" directory.

If "." is valid, Tomcat would deploy "." and it will also detect every
directory in "." (because it's the same as appBase) and separately, deploy them
as applications - each of those dirs is presumably missing a WEB-INF/web.xml,
which means that no security constraints are applied. The extra applications
take priority over the ROOT application (as they have a longer context path),
so any requests to resources in them would be unprotected.

Now please, join to the Tomcat Users list (not because I'm user, but because
*you* are) and we'll explain all of this to you, if you still don't understand
why you are wrong.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to