tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "David Soroko" <dav...@mannanetwork.com>
Subject Unsafe path ?
Date Tue, 13 Mar 2001 12:52:36 GMT
Hi all

>From within a servlet I am trying to read a file in the following way
    getServletContext().getResourceAsStream(getInitParameter("envFile"));

When the parameter envFile has the value /WEB-INF/../../env.xml
I am getting the following message from Tomcat:
    Unsafe path D:\Jupiter\tomcat\webapps\dir1\dir2\dir3
/WEB-INF/../../env.xml

Any ideas why is that?

Interestingly, when the parameter envFile has the value /WEB-INF/../env.xml
Tomcat has no problems reading the file.

This is on Tomcat 3.2/Wintel.

TIA

--

============================================
David Soroko
mailto:davids@mannanetwork.com
http://www.geocities.com/SiliconValley/Campus/1628/
Group Manager, Core Technologies
Manna Inc.
============================================


Mime
View raw message