-
Dave Syer authored
* Added additional search in AbstractEmbeddedServletContainerFactory.getValidDocumentRoot() to detect a /WEB-INF/ directory in the code archive * If the code archive is in /WEB-INF/** then we assume it is safe to serve content from / (exposes the loader classes but nothing sensitive from the app) [Fixes #54345578]
39425c81
Name |
Last commit
|
Last update |
---|---|---|
.. | ||
main/java/org/springframework/boot/sample/jetty | ||
test/java/org/springframework/boot/sample/jetty |