[undertow-dev] Different checks between servlet context's get resource methods

Brad Wood bdw429s at gmail.com
Wed Jul 29 14:04:09 EDT 2020


Why does the *getResource()* method in *ServletContextImpl* have the
following check

        if (!path.startsWith("/")) {
            throw
UndertowServletMessages.MESSAGES.pathMustStartWithSlash(path);
        }

but the *getResourceAsStream()* method in the same class does not.

The ServletContext spec does say "*The path must begin with a / *" for the
*getResource()* method
https://javaee.github.io/javaee-spec/javadocs/javax/servlet/ServletContext.html#getResource-java.lang.String-


And the *getResourceAsStream()* method also says that "*The path must be
specified according to the rules given in getResource*"

https://javaee.github.io/javaee-spec/javadocs/javax/servlet/ServletContext.html#getResourceAsStream-java.lang.String-


So it seems the same validation rules should apply to both methods.

Thanks!

~Brad

*Developer Advocate*
*Ortus Solutions, Corp *

E-mail: brad at coldbox.org
ColdBox Platform: http://www.coldbox.org
Blog: http://www.codersrevolution.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/undertow-dev/attachments/20200729/af292616/attachment.html 


More information about the undertow-dev mailing list