Canonicalize request paths before performing request path matching
------------------------------------------------------------------
Key: SHIRO-207
URL: https://issues.apache.org/jira/browse/SHIRO-207
Project: Shiro
Issue Type: Bug
Components: Web
Affects Versions: 1.0.0
Reporter: Les Hazlewood
Fix For: 1.1.0
Request paths should be canonicalized before performing path matching logic to
ensure that any request that might have relative path indicators are handled
properly.
For example, a request to:
http://localhost:8080/some/./pages/../location.jsp
should be canonicalized to:
http://localhost:8080/some/location.jsp
before applying path matching logic.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
