https://bz.apache.org/bugzilla/show_bug.cgi?id=61369
--- Comment #2 from Remy Maucherat <r...@apache.org> --- The canonical path comparison is a last resort safety net. So it's still useful then, that's interesting. If you confirm the behavior, it seems we're good as is, the check is supposed to catch this and prevent trouble (but then a webapp has to be fully packaged as per the specification). -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org