tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Incze Lajos <in...@mail.matav.hu>
Subject Re: cvs commit: jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/connector/http HttpProcessor.java
Date Fri, 10 Aug 2001 00:01:04 GMT
On Thu, Aug 09, 2001 at 07:43:00PM -0000, craigmcc@apache.org wrote:
> craigmcc    01/08/09 12:43:00
> 
...
>   Make request URIs the contain "/..." (or any longer series of periods)
>   invalid.  On some (all?) Windows platforms, this causes the OS to walk the
>   directory tree just like "../../.." type sequences do.
...

Is this a "feature" (I mean a documented thing) or a bug? And: if a bug
then - just theoretically - is that a goood decision to program for bugs?
Even if you get away with this thing at URL parsing you wil get it 
back at places that you can't control - you can't be safe until the
bug is not fixed on the platform itself.

(Otherwise on my NT4 (SP6) the ........ etc. works at the DOS prompt
mostly like a single dot. So here are some "remain in place" commands:
cd .
cd ....
cd .....................

But:
cd ................\............... type commands sometimes succeed,
sometimes raise an "The system cannot find the path specified" message
and I'm lazy to try to figure out what is the rule behind this
boring error.)


incze

Mime
View raw message