Open michaelwechner opened 12 years ago
It seems to me that this has something to do with
http://tomcat.apache.org/security-6.html#Fixed%20in%20Apache%20Tomcat%206.0.10
One can allow %2f by setting inside apache-tomcat-7.0.25/bin/catalina.sh the JAVA_OPTS to
JAVA_OPTS="$JAVA_OPTS -Dorg.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH=true"
Please don't forget to restart Tomcat
I have added now a sample startup script to
https://github.com/wyona/yanel/blob/master/tools/apache-tomcat/7.0.25/bin/catalina.sh
and upgraded the default Tomcat to 7.0.25 inside
https://github.com/wyona/yanel/blob/master/src/build/build.properties
With Tomcat 7 resource type icons are not displayed, e.g.
http://127.0.0.1:8080/yanel/yanel/resource-types/http%3a%2f%2fwww.wyona.org%2fyanel%2fresource%2f1.0%3a%3ayanel-user/yanel/icons/32x32/rt-icon.png
(Source: YANEL_HOME/src/contributions/resources/yanel-user/yanel-htdocs/icons/32x32/rt-icon.png)
whereas with Tomcat 5 this is seems to work.
These icons are for example referenced from the "welcome" realm:
http://127.0.0.1:8080/yanel/