Re: [PAX WEB] Does DefaultHttpContext allow access to all resources in the bundle?

2022-02-02 Thread Grzegorz Grzybek
Hello See the javadoc for javax.servlet.ServletContext.getResourceAsStream(): > > *This method bypasses both implicit (no direct access to WEB-INF or > META-INF) and explicit (defined by the webapplication) security > constraints. Care should be taken both when constructing the path (e.g. >

[PAX WEB] Does DefaultHttpContext allow access to all resources in the bundle?

2022-02-02 Thread Daniel Stoch
Hi, In Wicket web framework if some request url has not a dedicated/registered handler in application then WicketServlet fallbacks processing to return a resource from ServletContext as a response content: InputStream stream = getServletContext().getResourceAsStream(url); String mimeType