On Fri, 16 Jan 2026 08:07:48 GMT, Volkan Yazici <[email protected]> wrote:
> Currently `HttpServer` allows matching a request path `/foobar` to context > path `/foo`. Replace this surprising behaviour with a safer approach by > requiring exact *path prefix matches*. > > > | Request path > Context +------+-------+----------+--------- > path | /foo | /foo/ | /foo/bar | /foobar > ---------+------+-------+----------+--------- > / | Y | Y | Y | Y > /foo/ | N | Y | Y | N This pull request has now been integrated. Changeset: bea48b54 Author: Volkan Yazici <[email protected]> URL: https://git.openjdk.org/jdk/commit/bea48b54e2f423693e1e472129a86b030baf9eee Stats: 473 lines in 6 files changed: 447 ins; 2 del; 24 mod 8272758: Improve HttpServer to avoid partial file name matches while mapping request path to context path Reviewed-by: dfuchs ------------- PR: https://git.openjdk.org/jdk/pull/29264
