DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=32806>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=32806





------- Additional Comments From [EMAIL PROTECTED]  2004-12-24 02:56 -------

        Here is some feedback I got from the specification lead
maintainer for the Servlet API. He points out that there is nothing
preventing an implementation from mapping URLs to paths in a
case-insensitive manner.

==================BEGIN FORWARDED MESSAGE==================
Hi Gili
On Dec 22, 2004, at 12:32 PM, Gili wrote:

> Greg,
>
>       You talk as if File.getCanonicalPath() did not exist :) So my
> answer is twofold:
>
> 1) Password strings differ from file paths. Yes, the latter can be
> represented in the form of a String, but we really know it represents a
> file path. And while we're on the topic, I suspect the implementation
> stores such entities as "File" objects internally, not Strings.
>

Yes passwords are a different animal from file paths.  An
implementation
of the servlet API will be whether file paths are canonical or not. 
Quoting
the servlet spec SRV2.4  Glossary page 328

"In HTTP-based URLs, the º/ºcharacter is reserved to separate a 
hierarchical
path structure in the URL-path portion of the URL. The server is 
responsible
for determining the meaning of the hierarchical structure. There is no
  correspondence between a URL-path and a given file system path."

The only two APIs that are provided for accessing a resource directly 
from the
servlet spec's perspective are:

ClassLoader.getResourceAsStream(String/URL) and
ServletContext.getResourceAsStream(String)

This is as close to file paths that the servlet API really get. It is 
generally not a
good practice to access the file system directly from a web 
application. With
the J2EE Reference implementation you need to change the security 
settings
of the web container to allow this.
===================END FORWARDED MESSAGE===================

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to