Merge branch '6.1.x'
This commit is contained in:
@@ -665,7 +665,6 @@ class ResourceWebHandlerTests {
|
||||
testInvalidPath("/../.." + secretPath, handler);
|
||||
testInvalidPath("/%2E%2E/testsecret/secret.txt", handler);
|
||||
testInvalidPath("/%2E%2E/testsecret/secret.txt", handler);
|
||||
testInvalidPath("%2F%2F%2E%2E%2F%2F%2E%2E" + secretPath, handler);
|
||||
}
|
||||
|
||||
private void testInvalidPath(String requestPath, ResourceWebHandler handler) {
|
||||
@@ -701,7 +700,6 @@ class ResourceWebHandlerTests {
|
||||
testResolvePathWithTraversal(method, "/url:" + secretPath);
|
||||
testResolvePathWithTraversal(method, "////../.." + secretPath);
|
||||
testResolvePathWithTraversal(method, "/%2E%2E/testsecret/secret.txt");
|
||||
testResolvePathWithTraversal(method, "%2F%2F%2E%2E%2F%2Ftestsecret/secret.txt");
|
||||
testResolvePathWithTraversal(method, "url:" + secretPath);
|
||||
|
||||
// The following tests fail with a MalformedURLException on Windows
|
||||
|
||||
@@ -657,7 +657,6 @@ class ResourceHttpRequestHandlerTests {
|
||||
testInvalidPath("/../.." + secretPath);
|
||||
testInvalidPath("/%2E%2E/testsecret/secret.txt");
|
||||
testInvalidPath("/%2E%2E/testsecret/secret.txt");
|
||||
testInvalidPath("%2F%2F%2E%2E%2F%2F%2E%2E" + secretPath);
|
||||
}
|
||||
|
||||
private void testInvalidPath(String requestPath) {
|
||||
|
||||
Reference in New Issue
Block a user