Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.
Bug 324360 - WebAppContext.getResource is missing some input validation
Summary: WebAppContext.getResource is missing some input validation
Status: RESOLVED FIXED
Alias: None
Product: Jetty
Classification: RT
Component: server (show other bugs)
Version: 8.0.0   Edit
Hardware: PC Mac OS X - Carbon (unsup.)
: P3 normal (vote)
Target Milestone: 7.1.x   Edit
Assignee: Greg Wilkins CLA
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-09-02 18:58 EDT by David Jencks CLA
Modified: 2010-09-07 21:03 EDT (History)
2 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description David Jencks CLA 2010-09-02 18:58:28 EDT 
The superclass has proper validation of not-null and must-start-with-/ but the loop in WebAppContext suppresses this checking.
Comment 1 David Jencks CLA 2010-09-02 18:59:45 EDT 
fixed in rev 2238
Comment 2 David Jencks CLA 2010-09-02 20:55:45 EDT 
port to jetty 7 rev 2240
Comment 3 Michael Gorovoy CLA 2010-09-07 21:03:14 EDT 
Marking as resolved.