arunmanni-ai commented on PR #1777: URL: https://github.com/apache/struts/pull/1777#issuecomment-4952020874
Thanks again — pushed two commits addressing points 1, 3, and the Locale import part of 4 (per-segment matching in containsMalformedPathSegment, and removed the now-redundant dot-checkin DefaultWebJarUrlProvider.split()). Still to follow in one more commit: - Small indentation cleanup and removing the now-unused `encoding` field (rest of point 4) - Replacing the denylist with a canonicalize approach (point 2) — taking a bit more care with this one since it also means wiring the resolved path through buildPath()/split() rather than just validating and discarding it, so it'll take a little longer to get right. Will update this thread once that's up. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
