Report #406 Details Project: Tomcat Category: Bug Report SubCategory: New Bug Report Class: swbug State: closed Priority: high Severity: critical Confidence: public Environment: Release: 3.1 JVM Release: Sun 1.3.0 Operating System: Windows OS Release: 2000 SP 1 Platform: P3 450Mhz 256MB
Synopsis: you can get the source code of jsp files Description: I dont know if this bug is known but... The jsp file extension is case sensitive (on MS) so if you request a .jsp file with extension .jSp forexample you get the source code. This is valid only for the tomcat web server. not with external web server.