What if there is no trailing slash, won't that give you a directory listing 
anyway?


On Wed, 07 Dec 2011 22:29:45 +0100, Lenny Primak <lpri...@hope.nyc.ny.us> wrote:

Jira created: https://issues.apache.org/jira/browse/TAP5-1779

On Dec 7, 2011, at 2:25 PM, David Rees wrote:

On Wed, Dec 7, 2011 at 10:53 AM, Lenny Primak <lpri...@hope.nyc.ny.us> wrote:
You can still get a directory listing of assets, but you can't access them 
directly.
I have a fix in the flowlogix library for this, but perhaps I should file a 
JIRA...

Yeah, you should.  That's an information disclosure security bug...

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org

Reply via email to