> From: CASALINO, Matteo Maria [mailto:matteo.maria.casal...@sap.com] 
> Subject: Nondeterministic behaviour of security constraints in Tomcat 7

> The problem occurs for HTTP requests matching to the most specific URL 
> pattern (in the above example, /a/b, /a/b/c, etc.),

Please state where in the servlet spec that /a/b should be matched by /a/b/*. 
(If the request for /a/b were to be redirected to /a/b/, that would be 
matched.)  You might want to add /a/b as an explicit <url-pattern> to avoid 
having requests to that target being handled by the /a/* rule.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to