I tested also, and determined that the only way to get that path was to start from the bin folder. However that is working for me, testing geoserver-main-latest-bin download. I added some notes to the ticket also.
I am assuming URLChecks are being enabled by default on main. Ian do you have any more information about your setup? -- Jody Garnett On Dec 7, 2023 at 7:02:51 AM, Andrea Aime <andrea.a...@geosolutionsgroup.com> wrote: > Likely starting GeoServer form inside the "bin" folder? > It's something I never do. > > I've tried with a 2.24.1 I had handy and: > > - Starting as usual from the top, calling "bin/startup.sh", no problem > - Getting into "bin" and starting from there... boom! From the logs: > > GEOSERVER DATA DIR is > /home/aaime/devel/gs_releases/geoserver-2.24.1/bin/../data_dir > ... > ---- Debugging information ---- > cause-exception : java.lang.IllegalArgumentException > cause-message : Contains invalid '..' path: > /home/aaime/devel/gs_releases/geoserver-2.24.1/bin/../data_dir > class : org.geoserver.catalog.impl.DataStoreInfoImpl > required-type : org.geoserver.catalog.impl.DataStoreInfoImpl > converter-type : > org.geoserver.config.util.XStreamPersister$StoreInfoConverter > line number : 17 > version : 2.24.1 > ------------------------------- > at > com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:81) > at > com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:68) > at > com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:52) > at > com.thoughtworks.xstream.core.TreeUnmarshaller.start(TreeUnmarshaller.java:136) > at > com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.unmarshal(AbstractTreeMarshallingStrategy.java:32) > at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1464) > > Looking at the bin I have handy, 2.23.3 is still working fine, even with > URL checks enabled (enabled them and restarted). > GeoServer 2.24.0 also loads fine from bin, with a relative data dir. > But 2.24.1 does not so... check the differences between 2.24.0 and 2.24.1 > > Cheers > Andrea > > > On Thu, Dec 7, 2023 at 1:00 PM Ian Turton <ijtur...@gmail.com> wrote: > >> I've just created https://osgeo-org.atlassian.net/browse/GEOS-11224 - >> basically you can't have `..` in the data directory path any longer, which >> we do by default, I'm guessing this is caused by one of the recent security >> fixes, does it ring a bell with anyone? >> >> Ian >> >> -- >> Ian Turton >> _______________________________________________ >> Geoserver-devel mailing list >> Geoserver-devel@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/geoserver-devel >> > > > -- > > Regards, > > Andrea Aime > > == > GeoServer Professional Services from the experts! > > Visit http://bit.ly/gs-services-us for more information. > == > > Ing. Andrea Aime > @geowolf > Technical Lead > > GeoSolutions Group > phone: +39 0584 962313 > > fax: +39 0584 1660272 > > mob: +39 339 8844549 > > https://www.geosolutionsgroup.com/ > > http://twitter.com/geosolutions_it > > ------------------------------------------------------- > > Con riferimento alla normativa sul trattamento dei dati personali (Reg. UE > 2016/679 - Regolamento generale sulla protezione dei dati “GDPR”), si > precisa che ogni circostanza inerente alla presente email (il suo > contenuto, gli eventuali allegati, etc.) è un dato la cui conoscenza è > riservata al/i solo/i destinatario/i indicati dallo scrivente. Se il > messaggio Le è giunto per errore, è tenuta/o a cancellarlo, ogni altra > operazione è illecita. Le sarei comunque grato se potesse darmene notizia. > > This email is intended only for the person or entity to which it is > addressed and may contain information that is privileged, confidential or > otherwise protected from disclosure. We remind that - as provided by > European Regulation 2016/679 “GDPR” - copying, dissemination or use of this > e-mail or the information herein by anyone other than the intended > recipient is prohibited. If you have received this email by mistake, please > notify us immediately by telephone or e-mail > _______________________________________________ > Geoserver-devel mailing list > Geoserver-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-devel >
_______________________________________________ Geoserver-devel mailing list Geoserver-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-devel
