Gregor Imboden wrote:
Hi Devs,

The following code in FilePolicyManager.java leads to an infinite loop
when an url contains other characters than [\w-._~].

Thanks for the report - would you mind filing a bug so it doesn't get lost?

Thanks!

-- Andreas


        //The live area should be restrictive and will use the policy belonging 
to self-or-ancestor
        if (url.startsWith("/live")) {
            while (url.indexOf("/") >= 0) {
                policy = buildSubtreePolicy(controller, url+"/");
                policies.add(policy);
                if(!policy.isEmpty()) {
                    url="";
                } else {
                    url=url.replaceFirst("/[\\w\\-\\.\\_\\~]*$","");
                }
            }
        }

The URL should probably be normalized before components like the PolicyManager
get theiry hands on it.

Cheers,
Gregor




---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to