[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2011-03-07 Thread JIRA
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13003407#comment-13003407 ] Ulrich Stärk commented on TAP5-815: --- This is still open in 5.1.0.6 which we haven't

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2011-03-07 Thread David Rees (JIRA)
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13003503#comment-13003503 ] David Rees commented on TAP5-815: - No objections here, but shouldn't it be a 5.1.0.8 or

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2010-01-19 Thread Jochen Kemnade (JIRA)
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12802141#action_12802141 ] Jochen Kemnade commented on TAP5-815: - In the current solution (as of 5.1.0.7) there is

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2010-01-13 Thread JIRA
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12799666#action_12799666 ] Ulrich Stärk commented on TAP5-815: --- It seems we still don't got it right 100%. In order

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2009-12-11 Thread Robert Zeigler (JIRA)
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12789621#action_12789621 ] Robert Zeigler commented on TAP5-815: - Tricky devil. There are still some issues in the

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2009-12-02 Thread Geoff Callender (JIRA)
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12785188#action_12785188 ] Geoff Callender commented on TAP5-815: -- Hey Robert, I haven't had a chance to review

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2009-11-12 Thread JIRA
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12776958#action_12776958 ] Ulrich Stärk commented on TAP5-815: --- Don't close it yet. I just created a project from the

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2009-11-12 Thread JIRA
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12776968#action_12776968 ] Ulrich Stärk commented on TAP5-815: --- There should be an additional contribution to the

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2009-11-11 Thread J le Roux (JIRA)
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12776391#action_12776391 ] J le Roux commented on TAP5-815: I can confirm that it works with 5.0.19-SNAPSHOT (svn

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2009-11-09 Thread Robert Zeigler (JIRA)
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12775085#action_12775085 ] Robert Zeigler commented on TAP5-815: - Hey Chris, I just committed the

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2009-11-05 Thread David Rees (JIRA)
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12774038#action_12774038 ] David Rees commented on TAP5-815: - @Robert - Thanks that sounds great! @Alex - Not sure what

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2009-11-05 Thread Christian Riedel (JIRA)
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12774042#action_12774042 ] Christian Riedel commented on TAP5-815: --- @Alex: the issue definitely affects 5.0.18,

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2009-11-05 Thread Robert Zeigler (JIRA)
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12774046#action_12774046 ] Robert Zeigler commented on TAP5-815: - Pretty sure Alex was referring to the

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2009-11-05 Thread Christian Riedel (JIRA)
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12774051#action_12774051 ] Christian Riedel commented on TAP5-815: --- oh, right. makes more sense... :) Asset

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2009-11-05 Thread JIRA
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12774227#action_12774227 ] Christian Köberl commented on TAP5-815: --- I just hacked our application and found even

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2009-11-04 Thread David Rees (JIRA)
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12773640#action_12773640 ] David Rees commented on TAP5-815: - This similarly 5.0.18 similarly as well - and the issue

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2009-11-04 Thread Alex Kotchnev (JIRA)
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12773653#action_12773653 ] Alex Kotchnev commented on TAP5-815: I'm totally blown away by the lack of interest this

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2009-11-03 Thread JIRA
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12773228#action_12773228 ] Christian Köberl commented on TAP5-815: --- At least the directory index should be fixed

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2009-08-26 Thread JIRA
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12747826#action_12747826 ] Ulrich Stärk commented on TAP5-815: --- In 5.2-SNAPSHOT you can still access files located on

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2009-08-26 Thread Thiago H. de Paula Figueiredo (JIRA)
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12747886#action_12747886 ] Thiago H. de Paula Figueiredo commented on TAP5-815: I agree with Ulrich

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2009-08-26 Thread JIRA
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12747889#action_12747889 ] Ulrich Stärk commented on TAP5-815: --- Accessing a Tapestry-managed asset from a non-Tapestry

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2009-08-26 Thread Thiago H. de Paula Figueiredo (JIRA)
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12747895#action_12747895 ] Thiago H. de Paula Figueiredo commented on TAP5-815: I agree with Ulrich.

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2009-08-26 Thread Robert Zeigler (JIRA)
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12748050#action_12748050 ] Robert Zeigler commented on TAP5-815: - Ulrich, Just allow access to Assets really

[jira] Commented: (TAP5-815) Asset dispatcher allows any file inside the webapp visible and downloadable

2009-08-26 Thread JIRA
[ https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12748057#action_12748057 ] Ulrich Stärk commented on TAP5-815: --- I had some singleton service holding a collection of