Do not support relative static resource paths
Closes gh-33687
This commit is contained in:
@@ -140,7 +140,7 @@ public abstract class ResourceHandlerUtils {
|
||||
return true;
|
||||
}
|
||||
}
|
||||
if (path.contains("..") && StringUtils.cleanPath(path).contains("../")) {
|
||||
if (path.contains("../")) {
|
||||
if (logger.isWarnEnabled()) {
|
||||
logger.warn(LogFormatUtils.formatValue(
|
||||
"Path contains \"../\" after call to StringUtils#cleanPath: [" + path + "]", -1, true));
|
||||
|
||||
Reference in New Issue
Block a user