Re: AW: tomcat 4.1 does not resolve links

[Luise Massimo]

Hi,
i think there is another problem in FileDirContext.java.....the problem reside in the following code:

if (!canPath.equals(absPath))
return null;

if you allow linking and the file linked is INSIDE webapp directory (so "isLink = !canPath.startsWith(absoluteBase)" is false, tomcat execute the code showed before and return null because absPath and canPath differ !
In this case the linking are allowed by "allowLinking" attribute, but are not allowed by the test inside FileDirContext


Torsten Fohrer wrote:

here is a patch for FileDirContext.java

-----Urspr�ngliche Nachricht-----
Von: Alexander Piavka [mailto:piavka@;cs.bgu.ac.il]
Gesendet: Donnerstag, 17. Oktober 2002 11:17
An: Tomcat Users List
Betreff: Re: tomcat 4.1 does not resolve links



Does anyone know then the 4.1.13 version will be released, or maybe this
bug has been already solved and i can download the current cvs(or a patch)?
Since i really need it urgently.
I tried to make minor changes in the FileDirContext.java file, so that
allowLinking is always enabled but it did now work.

Thanks.

On Sun, 6 Oct 2002, Remy Maucherat wrote:

Alexander Piavka wrote:

The RELEASE-NOTES it is said that to enable symbloic

linking i need to

add the allowLinking option to FileDirContext. But i did

not find anything

about FileDirContext in the documentation.
Does anyone know where sould the FileDirContext

configuration be put

and where is the documentation about it.

It turns out there is a bug in the feature in 4.1.12. It

will be fixed

in 4.1.13, and properly documented.

--
To unsubscribe, e-mail:

<mailto:tomcat-user-unsubscribe@;jakarta.apache.org>
For additional commands, e-mail:
<mailto:tomcat-user-help@;jakarta.apache.org>



------------------------------------------------------------------------

--
To unsubscribe, e-mail: <mailto:tomcat-user-unsubscribe@;jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-user-help@;jakarta.apache.org>

--
To unsubscribe, e-mail:   <mailto:tomcat-user-unsubscribe@;jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-user-help@;jakarta.apache.org>