[jbossseam-issues] [JBoss JIRA] Closed: (JBSEAM-2942) StyleResource serves any file from the classpath

StyleResource serves any file from the classpath ------------------------------------------------ Key: JBSEAM-2942 URL: http://jira.jboss.com/jira/browse/JBSEAM-2942 Project: Seam Issue Type: Bug Components: Core Reporter: Christian Bauer Assigned To: Pete Muir Priority: Blocker Fix For: 2.0.2.GA The StyleResource implementation does not check any patterns or filenames. It serves any file that can be found on the classpath, not only CSS. This is a major security hole: http://www.seamframework.org/seam/resource/style/META-INF/persistence.xml http://www.seamframework.org/seam/resource/style/org/jboss/seam/wiki/core...