[undertow-dev] Different checks between servlet context's get resource methods
Brad Wood
bdw429s at gmail.com
Wed Jul 29 14:04:09 EDT 2020
Why does the *getResource()* method in *ServletContextImpl* have the
following check
if (!path.startsWith("/")) {
throw
UndertowServletMessages.MESSAGES.pathMustStartWithSlash(path);
}
but the *getResourceAsStream()* method in the same class does not.
The ServletContext spec does say "*The path must begin with a / *" for the
*getResource()* method
https://javaee.github.io/javaee-spec/javadocs/javax/servlet/ServletContext.html#getResource-java.lang.String-
And the *getResourceAsStream()* method also says that "*The path must be
specified according to the rules given in getResource*"
https://javaee.github.io/javaee-spec/javadocs/javax/servlet/ServletContext.html#getResourceAsStream-java.lang.String-
So it seems the same validation rules should apply to both methods.
Thanks!
~Brad
*Developer Advocate*
*Ortus Solutions, Corp *
E-mail: brad at coldbox.org
ColdBox Platform: http://www.coldbox.org
Blog: http://www.codersrevolution.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/undertow-dev/attachments/20200729/af292616/attachment.html
More information about the undertow-dev
mailing list