spring/spring-framework
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-framework.git synced 2026-09-17 16:39:29 +00:00
Code Issues Projects Releases Wiki Activity

Improve static resource path check

Browse Source
This commit is contained in:
Rossen Stoyanchev
2016-06-28 16:50:32 -04:00
parent 4c87167c98
commit 269742589b
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
spring-webmvc/src/main/java/org/springframework/web/servlet/resource/ResourceHttpRequestHandler.java
+1 -1
View File
@@ -371,7 +371,7 @@ public class ResourceHttpRequestHandler extends WebContentGenerator
return true; return true;
} }
} }
if (path.contains("../")) { if (path.contains("..")) {
path = StringUtils.cleanPath(path); path = StringUtils.cleanPath(path);
if (path.contains("../")) { if (path.contains("../")) {
if (logger.isTraceEnabled()) { if (logger.isTraceEnabled()) {