On 25/05/2016 20:04, Martin Buchholz wrote:
Nothing has changed here and there is always a permission check before returning a URL to a resource on the class path.:Also, I'm sure your security experts have already considered the implications of following or not following symlinks when matching user-provided paths ...
-Alan
