-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Alejandro,
On 7/30/12 5:48 PM, Alejandro Mehring wrote:
> I'm migrating to Tomcat 7 a web system that used to run on Tomcat
> 4...
Been there (though I went through 5.5 and 6.0 to get there in a
relatively short amount of time).
> So far, I've been able to sort out all of the issues I've faced,
> but I'm stuck at one point. When a page loads in Tomcat 4, it goes
> and fetches the stylesheet from the server with a link of the form
>
> <link type="text/css" href="../lightStyle.css" rel="stylesheet">
Although this should work, I always recommend using context-relative
URLs like this:
<link type="text/css" href="<%=
response.encodeURL(request.getContextPath() + "/lightStyle.css") %>" />
This will ensure that your URLs resolve properly no matter how the
.jsp is being evaluated (for instance, in an include or after a
forward, where the client's URL may not match what your JSP expects).
> But on Tomcat 7, the parent directory indirection is removed, and I
> can't seem to find the way to prevent this from happening!
That doesn't seem right.
> What confuses me more, is that when Tomcat generates the *_jsp.java
> files, both 4 and 7 versions generate a line of code like this
> one:
>
> out.write("<link rel=\"stylesheet\" href=\"../lightStyle.css\"
> type=\"text/css\">\r\n\r\n");
>
> So i can't figure out why the rendering process is removing the
> '../' bit of the link!
I have a hard time believing that Tomcat is modifying anything: in the
case above, Tomcat does not interpret anything at all. As far as
Tomcat is concerned, the above is just a string of characters like
"Hello, World" and has no URL context or anything like that.
Are you sure this isn't being included by another JSP or forwarded
from another URL?
> Has anyone faced this problem before? I haven't found any parent
> directory restriction configuration or something that would point
> me in that direction.
What does the output of the JSP look like? That is, what is the actual
content of the page as seen by the client?
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAlAXLn4ACgkQ9CaO5/Lv0PDiHQCgsxBv7KqRAX7JkpKb2Se0S83R
aQ8AnRpgtWMK7sCy7EDT1uej9ySVStll
=sO4e
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
