Skip to main content
NitroHazeDev
Level 9
Oct 16, 2015 2:26 AM UTC
Solved

Sling.servlet.paths and Dispatcher Security concerns

Hello,

I am wondering if someone could point me in the right direction wrt the usage of sling.servlet.paths , via dispatcher.

I have a form post to a servlet and in the servlet i have the sling.servlet.paths = /apps/../../ . now via dispatcher i am forced to allow the POST to the path apps/../..

Is there any security concern here providing the below rule.

/0208 { /type "allow" /glob "POST /apps/test/community/test*" }, 

Regards,

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
kaushalmallAccepted solution
Adobe Employee
Oct 16, 2015 2:26 AM UTC

Best practice is to use /bin/path/to/servlet. 

View in thread

2 replies

NitroHazeDevAuthor
Level 9
Oct 16, 2015 2:26 AM UTC

kaushal_mall wrote...

Best practice is to use /bin/path/to/servlet. 

 

Thank you Kaushal

Translate
Adobe Employee
kaushalmallAdobe EmployeeAccepted solution
Adobe Employee
Oct 16, 2015 2:26 AM UTC

Best practice is to use /bin/path/to/servlet. 

Translate
Terms & ConditionsAccessibility statement

Loading footer...