Skip to main content
Level 9
October 16, 2015
解決済み

Sling.servlet.paths and Dispatcher Security concerns

  • October 16, 2015
  • 2 の返信
  • 1200 ビュー

Hello,

I am wondering if someone could point me in the right direction wrt the usage of sling.servlet.paths , via dispatcher.

I have a form post to a servlet and in the servlet i have the sling.servlet.paths = /apps/../../ . now via dispatcher i am forced to allow the POST to the path apps/../..

Is there any security concern here providing the below rule.

/0208 { /type "allow" /glob "POST /apps/test/community/test*" }, 

Regards,

このトピックへの返信は締め切られました。
ベストアンサー kaushalmall

Best practice is to use /bin/path/to/servlet. 

2 の返信

NitroHazeDev作成者
Level 9
October 16, 2015

kaushal_mall wrote...

Best practice is to use /bin/path/to/servlet. 

 

Thank you Kaushal

Adobe Employee
October 16, 2015

Best practice is to use /bin/path/to/servlet.