Sling.servlet.paths and Dispatcher Security concerns

[NitroHazeDev]

Hello,

I am wondering if someone could point me in the right direction wrt the usage of sling.servlet.paths , via dispatcher.

I have a form post to a servlet and in the servlet i have the sling.servlet.paths = /apps/../../ . now via dispatcher i am forced to allow the POST to the path apps/../..

Is there any security concern here providing the below rule.

/0208 { /type "allow" /glob "POST /apps/test/community/test*" }, 

Regards,

[kaushal_mall · Accepted solution]

Best practice is to use /bin/path/to/servlet. 

[NitroHazeDev]

kaushal_mall wrote...

Best practice is to use /bin/path/to/servlet. 

Thank you Kaushal