Re: normalize usage in RepositoryAccess

2006-12-08 Thread Joakim Erdfelt
The "Request Path" is what is being tested here. Proper pattern is "/${repoId}/${pathToResource}" The idea with the normalize found in RepositoryAccess is to prevent a user from requesting resources outside of the repository tree, such as /etc/passwd or /etc/groups or the configuration files for t

Re: normalize usage in RepositoryAccess

2006-12-08 Thread Brett Porter
Wouldn't the windows SMB name be //central/etc/password? ie, normalize should remove duplicate path separators unless they are leading? - Brett On 09/12/2006, at 8:17 AM, Henri Yandell wrote: In looking at moving from Plexus FileUtils.normalize to IO FilenameUtils.normalize, there's on fea

normalize usage in RepositoryAccess

2006-12-08 Thread Henri Yandell
In looking at moving from Plexus FileUtils.normalize to IO FilenameUtils.normalize, there's on feature difference in that the latter does not convert '//etc/passwd' to '/etc/passwd'. Kenney suggests on #plexus that that is probably to support Windows SMB names. RepositoryAccessTest contains a tes