spring/spring-framework
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-framework.git synced 2026-09-24 15:49:26 +00:00
Code Issues Projects Releases Wiki Activity

Do not support relative static resource paths

Browse Source 
Closes gh-33687
This commit is contained in:
rstoyanchev
2024-10-14 15:54:59 +01:00
parent e191c34078
commit 1a0b577bfc
4 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
spring-webmvc/src/test/java/org/springframework/web/servlet/resource/ResourceHttpRequestHandlerTests.java
+1
View File
@@ -643,6 +643,7 @@ class ResourceHttpRequestHandlerTests {
testInvalidPath("../testsecret/secret.txt");
testInvalidPath("test/../../testsecret/secret.txt");
testInvalidPath(":/../../testsecret/secret.txt");
testInvalidPath("/testsecret/test/../secret.txt");
Resource location = new UrlResource(ResourceHttpRequestHandlerTests.class.getResource("./test/"));
this.handler.setLocations(List.of(location));