tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 11501] - tldScanJar() throws Exception during scan if jar file is symlink
Date Wed, 14 Aug 2002 13:32:43 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=11501>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=11501

tldScanJar() throws Exception during scan if jar file is symlink

remm@apache.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX



------- Additional Comments From remm@apache.org  2002-08-14 13:32 -------
This is a likely side effect of some security tightening which has been done on
the file back end, and which is designed to disallow any kind of access outside
of the webapp root folder (it works by checking if the absolute canonicalized
path of the resource starts with the canonicalized base path of the webapp).

If you want to disable this, you can use your own custom implementation of the
directory context, like the one which ships with 4.0.4.

--
To unsubscribe, e-mail:   <mailto:tomcat-dev-unsubscribe@jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-dev-help@jakarta.apache.org>


Mime
View raw message