struts-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From David Bowers <vivelafri...@gmail.com>
Subject URL validation
Date Fri, 12 Nov 2004 18:49:22 GMT
There was a very good conversation in April on this list discussing
URL validation, in particular, is an http URL valid if no path is
specified?  For example http://google.com.

See this link: http://www.mail-archive.com/dev@struts.apache.org/msg00037.html
for more detail.

It seemed like the consensus was that it would be good if this
behavior could be turned on or off.  What is the current status of
this?  It looks like a patch was submitted related to this issue: 
http://issues.apache.org/bugzilla/show_bug.cgi?id=28190, though it's
not obvious that this would solve the problem.  This patch would tell
us exactly why http://google.com failed, but it does not seem to
provide the flexibility to just allow http://google.com to succeed.

Is there an interest in modifying the url validator to take an
variable called lenientPath?  That way if the path ends with a / or is
null it would still pass?

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org


Mime
View raw message