Jira created: https://issues.apache.org/jira/browse/TAP5-1779
On Dec 7, 2011, at 2:25 PM, David Rees wrote: > On Wed, Dec 7, 2011 at 10:53 AM, Lenny Primak <lpri...@hope.nyc.ny.us> wrote: >> You can still get a directory listing of assets, but you can't access them >> directly. >> I have a fix in the flowlogix library for this, but perhaps I should file a >> JIRA... > > Yeah, you should. That's an information disclosure security bug... > > -Dave > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org > For additional commands, e-mail: users-h...@tapestry.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org For additional commands, e-mail: users-h...@tapestry.apache.org
