Skip to content

Commit

Permalink
Issue #4160, fixes some spelling mistakes
Browse files Browse the repository at this point in the history
Signed-off-by: Julien Gouesse <[email protected]>
  • Loading branch information
Julien Gouesse committed Oct 21, 2019
1 parent 862ac40 commit a0c9a14
Showing 1 changed file with 2 additions and 2 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -19,8 +19,8 @@
[[serving-aliased-files]]
=== Aliased Files and Symbolic links

Web applications will often server static content from the file system provided by the operating system running underneath the JVM.
However because file systems often implement multiple aliased names for the same file, then security constraints and other servlet URI space mappings my inadvertently be bypassed by aliases.
Web applications will often serve static content from the file system provided by the operating system running underneath the JVM.
However, because file systems often implement multiple aliased names for the same file, then security constraints and other servlet URI space mappings may inadvertently be bypassed by aliases.

A key example of this is case insensitivity and 8.3 filenames implemented by the Windows file system.
If a file within a web application called `/mysecretfile.txt` is protected by a security constraint on the URI `/mysecretfile.txt`, then a request to `/MySecretFile.TXT` will not match the URI constraint because URIs are case sensitive, but the Windows file system will report that a file does exist at that name and it will be served despite the security constraint.
Expand Down

0 comments on commit a0c9a14

Please sign in to comment.