tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Craig R. McClanahan" <>
Subject Re: pathTranslated and pathInfo... More unsafe paths
Date Thu, 15 Mar 2001 03:04:40 GMT

On Wed, 14 Mar 2001, christopher hull wrote:

> Wow!  Thanks for the quick response.
> The problem it turns out has nothing to do with spaces.  When 
> getResourceAsStream() can't find a resource, it displays a space just 
> after the root for convenience.  It turns out that getResourceAsStream
>   is case sensitive.  Is there a way to tell getResourceAsStream
>   not to be?

Servlets are case sensitive.  Tomcat 3.1 and 3.2 (without the .1
updates) had problems in this area that caused huge security holes because
they were NOT completely case sensitive.

If you still want non-case-sensitive Tomcat, well, you've got the source
code ... but you are totally on your own.

> Thanks;
> -Chris

Craig McClanahan

View raw message