Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-7457

Issue that user can see files under WEB-INF directory.

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Major Major
    • core
    • None
    • Tomcat 6.0.28

      The user who can see the Hudson server from Web can see the WEB-INF/web.xml file etc. of the server with following URL.

      http://(host of HUDSON_HOME)/static/(Arbitrary String)/WEB-INF/web.xml

      For instance, it is
      http://ci.hudson-labs.org/static/ArbitraryString/WEB-INF/web.xml

      I want to set not to see those to a general user.

          [JENKINS-7457] Issue that user can see files under WEB-INF directory.

          SCM/JIRA link daemon added a comment - Code changed in stapler User: : kohsuke Path: trunk/stapler/core/src/main/java/org/kohsuke/stapler/Stapler.java https://stapler.dev.java.net/source/browse/stapler/trunk/stapler/core/src/main/java/org/kohsuke/stapler/Stapler.java?view=diff&rev=1619&p1=trunk/stapler/core/src/main/java/org/kohsuke/stapler/Stapler.java&p2=trunk/stapler/core/src/main/java/org/kohsuke/stapler/Stapler.java&r1=1618&r2=1619 Log: [FIXED JENKINS-7457] Don't serve WEB-INF and stuff under it.

          Code changed in hudson
          User: : kohsuke
          Path:
          trunk/hudson/main/core/pom.xml
          trunk/www/changelog.html
          http://jenkins-ci.org/commit/35233
          Log:
          [FIXED JENKINS-7457] integrated toward 1.378

          SCM/JIRA link daemon added a comment - Code changed in hudson User: : kohsuke Path: trunk/hudson/main/core/pom.xml trunk/www/changelog.html http://jenkins-ci.org/commit/35233 Log: [FIXED JENKINS-7457] integrated toward 1.378

          dogfood added a comment -

          Integrated in hudson_main_trunk #295
          [FIXED JENKINS-7457] integrated toward 1.378

          kohsuke :
          Files :

          • /trunk/hudson/main/core/pom.xml
          • /trunk/www/changelog.html

          dogfood added a comment - Integrated in hudson_main_trunk #295 [FIXED JENKINS-7457] integrated toward 1.378 kohsuke : Files : /trunk/hudson/main/core/pom.xml /trunk/www/changelog.html

            Unassigned Unassigned
            iijimas iijimas
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved: