Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-21543

RequestDispatcher with non-existent path can acquire web.xml content

    XMLWordPrintable

Details

    • Bug
    • Resolution: Not a Bug
    • Major
    • None
    • 7.3.x
    • Undertow
    • None
    • False
    • False
    • Undefined

    Description

      The web.xml content can be acquired through RequestDispatcher, but the argument "$path" is a non-existent path. The expected result is returned HTTP 404. Due to the actual content of the $path can not be sent to the Jira,  the issue can be reproduced by using IssueTest.war

      Attachments

        Issue Links

          is related to

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-21589 [GSS](7.3.z) UNDERTOW-1886 - Undertow ignores two-dot segments in relative path URI when its canonicalized path is outside servlet context

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Verified

          Activity

            People

              thofman Tomas Hofman
              rhn-support-ztan Zhuo Tan
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: