[ 
https://issues.apache.org/jira/browse/CMIS-97?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Florent Guillaume resolved CMIS-97.
-----------------------------------

    Resolution: Fixed

Done.
r898858

Now the URI template advertised is:
  http://.../cmis/object?path={path}...
So Tomcat shouldn't have a problem anymore.

The old http://.../cmis/path/folder1/folder2/doc1 still works for compatibility 
and because I think it's nicer overall :)


> Deal with encoded paths in URI templates
> ----------------------------------------
>
>                 Key: CMIS-97
>                 URL: https://issues.apache.org/jira/browse/CMIS-97
>             Project: Chemistry
>          Issue Type: Improvement
>          Components: atompub, server
>            Reporter: Florent Guillaume
>            Assignee: Florent Guillaume
>
> Tomcat since 6.0.10 by default forbids any URL containing a %2F (for some 
> dubious security reasons to be robust against broken proxies).
> To allow them you have to start your Tomcat with:
>  -Dorg.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH=true
> See 
> http://tomcat.apache.org/security-6.html#Fixed%20in%20Apache%20Tomcat%206.0.10
>  for more.
> But it's it's too problematic to ask people running Chemistry server code to 
> use -Dsomething at Tomcat startup, so let's change Chemistry to use 
> .../object?path={path} for path-based addressing.
> It's less elegant but then again there's no way to advertise clean path 
> building like http://host/cmis/path/folder1/folder2/foo, they just can't be 
> constructed using CMIS 1.0 URI templates, which MUST be encoded (which 
> doesn't prevent us from accepting them however).

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to