Return-Path: Delivered-To: apmail-jakarta-struts-user-archive@jakarta.apache.org Received: (qmail 8930 invoked by uid 500); 11 Mar 2001 23:59:21 -0000 Mailing-List: contact struts-user-help@jakarta.apache.org; run by ezmlm Precedence: bulk Reply-To: struts-user@jakarta.apache.org list-help: list-unsubscribe: list-post: Delivered-To: mailing list struts-user@jakarta.apache.org Received: (qmail 8906 invoked from network); 11 Mar 2001 23:59:19 -0000 Received: from web13113.mail.yahoo.com (216.136.174.181) by h31.sny.collab.net with SMTP; 11 Mar 2001 23:59:19 -0000 Message-ID: <20010311235926.12163.qmail@web13113.mail.yahoo.com> Received: from [149.74.13.177] by web13113.mail.yahoo.com; Sun, 11 Mar 2001 15:59:26 PST Date: Sun, 11 Mar 2001 15:59:26 -0800 (PST) From: Arch Pennington Subject: The use of '..' in relative path includes in JSPs To: struts-user@jakarta.apache.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Rating: h31.sny.collab.net 1.6.2 0/1000/N Are Servlet 2.2/JSP 1.1 compatible containers *required* to support relative paths that use the '..' notation to refer to a parent directory? JRun 3.0, iPlanet 4.1 and Tomcat 3.2.1 seem to accept '..' in a relative path for static includes of JSP pages, but not for dynamic includes (all includes were from a JSP page with no mappings defined for them in web.xml). The JSP 1.1 specification (Section 2.5.2) delegates the definition of relative paths to RFC 2396. According to RFC 2396 (Section 5 and Appendix C), relative paths should be allowed. JSP 1.1 Spec: http://java.sun.com/products/jsp/download.html RFC 2396 Spec: http://www.faqs.org/rfcs/rfc2396.html __________________________________________________ Do You Yahoo!? Yahoo! Auctions - Buy the things you want at great prices. http://auctions.yahoo.com/