https://issues.apache.org/bugzilla/show_bug.cgi?id=55776
Mark Thomas <ma...@apache.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW --- Comment #5 from Mark Thomas <ma...@apache.org> --- That isn't valid since the first /../ sequence is trying to step outside the root of the class loader resources. However /foo/../app.xml also fails and that is valid so I am currently working on a fix. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org