Likely starting GeoServer form inside the "bin" folder?
It's something I never do.

I've tried with a 2.24.1 I had handy and:

   - Starting as usual from the top, calling "bin/startup.sh", no problem
   - Getting into "bin" and starting from there... boom! From the logs:

GEOSERVER DATA DIR is
/home/aaime/devel/gs_releases/geoserver-2.24.1/bin/../data_dir
...
---- Debugging information ----
cause-exception     : java.lang.IllegalArgumentException
cause-message       : Contains invalid '..' path:
/home/aaime/devel/gs_releases/geoserver-2.24.1/bin/../data_dir
class               : org.geoserver.catalog.impl.DataStoreInfoImpl
required-type       : org.geoserver.catalog.impl.DataStoreInfoImpl
converter-type      :
org.geoserver.config.util.XStreamPersister$StoreInfoConverter
line number         : 17
version             : 2.24.1
-------------------------------
at
com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:81)
at
com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:68)
at
com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:52)
at
com.thoughtworks.xstream.core.TreeUnmarshaller.start(TreeUnmarshaller.java:136)
at
com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.unmarshal(AbstractTreeMarshallingStrategy.java:32)
at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1464)

Looking at the bin I have handy, 2.23.3 is still working fine, even with
URL checks enabled (enabled them and restarted).
GeoServer 2.24.0 also loads fine from bin, with a relative data dir.
But 2.24.1 does not so... check the differences between 2.24.0 and 2.24.1

Cheers
Andrea


On Thu, Dec 7, 2023 at 1:00 PM Ian Turton <ijtur...@gmail.com> wrote:

> I've just created https://osgeo-org.atlassian.net/browse/GEOS-11224 -
> basically you can't have `..` in the data directory path any longer, which
> we do by default, I'm guessing this is caused by one of the recent security
> fixes, does it ring a bell with anyone?
>
> Ian
>
> --
> Ian Turton
> _______________________________________________
> Geoserver-devel mailing list
> Geoserver-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
>


-- 

Regards,

Andrea Aime

==
GeoServer Professional Services from the experts!

Visit http://bit.ly/gs-services-us for more information.
==

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions Group
phone: +39 0584 962313

fax:     +39 0584 1660272

mob:   +39  339 8844549

https://www.geosolutionsgroup.com/

http://twitter.com/geosolutions_it

-------------------------------------------------------

Con riferimento alla normativa sul trattamento dei dati personali (Reg. UE
2016/679 - Regolamento generale sulla protezione dei dati “GDPR”), si
precisa che ogni circostanza inerente alla presente email (il suo
contenuto, gli eventuali allegati, etc.) è un dato la cui conoscenza è
riservata al/i solo/i destinatario/i indicati dallo scrivente. Se il
messaggio Le è giunto per errore, è tenuta/o a cancellarlo, ogni altra
operazione è illecita. Le sarei comunque grato se potesse darmene notizia.

This email is intended only for the person or entity to which it is
addressed and may contain information that is privileged, confidential or
otherwise protected from disclosure. We remind that - as provided by
European Regulation 2016/679 “GDPR” - copying, dissemination or use of this
e-mail or the information herein by anyone other than the intended
recipient is prohibited. If you have received this email by mistake, please
notify us immediately by telephone or e-mail
_______________________________________________
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Reply via email to