On Fri, Jan 8, 2010 at 3:35 PM, Flo <[email protected]> wrote:
> Yes, im sure. I use jaxrs and configure it with spring and deploy on
> Apache tomcat 6.x
>
> http://0.0.0.0:8080/poc-atompub-server-spring/srv/cmis/path/%2FCMISTCK%201262621638852%20-%20testObjectByPath%2FtestObjectByPath
>
> Is it possible that Tomcat has problems with %2F ? I ve no idea.
> GetObjectByPath in Abderaresource is never called.

Ok I've tracked this down and it's indeed a Tomcat problem. Tomcat
since 6.0.10 by default forbids any URL containing a %2F (for some
dubious security reasons to be robust against broken proxies).

To allow them you have to start your Tomcat with:
  -Dorg.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH=true

See 
http://tomcat.apache.org/security-6.html#Fixed%20in%20Apache%20Tomcat%206.0.10
for more.

But this is going to be a big gotcha for a lot of application servers
using Tomcat...

Florent

-- 
Florent Guillaume, Director of R&D, Nuxeo
Open Source, Java EE based, Enterprise Content Management (ECM)
http://www.nuxeo.com   http://www.nuxeo.org   +33 1 40 33 79 87

Reply via email to