tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject [Bug 54630] New: Broken condition in sources.jsp
Date Sun, 03 Mar 2013 11:25:01 GMT
https://issues.apache.org/bugzilla/show_bug.cgi?id=54630

            Bug ID: 54630
           Summary: Broken condition in sources.jsp
           Product: Tomcat 7
           Version: 7.0.35
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Examples
          Assignee: dev@tomcat.apache.org
          Reporter: novikov.i.m@gmail.com
    Classification: Unclassified

Broken condition in
./webapps/examples/WEB-INF/classes/examples/ShowSource.java:

 30         if(jspFile.indexOf("..") >= 0 ||
jspFile.toUpperCase(Locale.ENGLISH).indexOf("/WEB-INF/") != 0 ||
jspFile.toUpperCase(Locale.ENGLISH).indexOf("/META-INF/") != 0)
 31             throw new JspTagException((new StringBuilder()).append("Invalid
JSP file ").append(jspFile).toString());

No ways to make all conditions 
   jspFile.toUpperCase(Locale.ENGLISH).indexOf("/WEB-INF/") != 0
and
   jspFile.toUpperCase(Locale.ENGLISH).indexOf("/META-INF/") != 0)
true both

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Mime
View raw message