Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Issue #6473 - canonicalPath refactor & fix alias check in PathResource (Jetty-10) #6478

Merged
merged 6 commits into from Jun 29, 2021
Merged

Issue #6473 - canonicalPath refactor & fix alias check in PathResource (Jetty-10) #6478

merged 6 commits into from Jun 29, 2021

Commits on Jun 29, 2021

  1. Issue #6473 - canonicalPath refactor & fix alias check in PathResource 

    Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
    @lachlan-roberts
    lachlan-roberts committed Jun 29, 2021
    Configuration menu
    Copy the full SHA
    92a74d6 View commit details
    Browse the repository at this point in the history

  2. Issue #6473 - Improve alias checking in PathResource. 

    * Reverted %-escape handling for URI query parts.
* Performing canonicalization in ServletContext.getResource(),
  and improving alias checking in ContextHandler.getResource().
* Performing canonicalization checks in Resource.addPath() to avoid
  navigation above of the root.
* Test added and fixed.
* Various cleanups.
* Improved javadoc and comments

Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
    @sbordet @lachlan-roberts
    sbordet authored and lachlan-roberts committed Jun 29, 2021
    Configuration menu
    Copy the full SHA
    4cf9ca7 View commit details
    Browse the repository at this point in the history

  3. Fix failing tests. 

    Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
    @lachlan-roberts
    lachlan-roberts committed Jun 29, 2021
    Configuration menu
    Copy the full SHA
    7b2d94b View commit details
    Browse the repository at this point in the history

  4. fix javadoc grammar 

    Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
    @lachlan-roberts
    lachlan-roberts committed Jun 29, 2021
    Configuration menu
    Copy the full SHA
    37c657a View commit details
    Browse the repository at this point in the history

  5. Update jetty-http/src/main/java/org/eclipse/jetty/http/HttpURI.java 

    Co-authored-by: Greg Wilkins <gregw@webtide.com>
    @lachlan-roberts @gregw
    lachlan-roberts and gregw committed Jun 29, 2021
    Configuration menu
    Copy the full SHA
    66b1cbb View commit details
    Browse the repository at this point in the history

  6. Compliance mode HttpURI uses UriCompliance.Violation 

    Signed-off-by: Greg Wilkins <gregw@webtide.com>
    @gregw
    gregw committed Jun 29, 2021
    Configuration menu
    Copy the full SHA
    9d98fe7 View commit details
    Browse the repository at this point in the history