Repository navigation
[JENKINS-7457] Issue that user can see files under WEB-INF directory. #19816
Description
The user who can see the Hudson server from Web can see the WEB-INF/web.xml file etc. of the server with following URL.
http://(host of HUDSON_HOME)/static/(Arbitrary String)/WEB-INF/web.xml
For instance, it is
http://ci.hudson-labs.org/static/ArbitraryString/WEB-INF/web.xml
I want to set not to see those to a general user.
Originally reported by iijimas, imported from: Issue that user can see files under WEB-INF directory.
- status: Resolved
- priority: Major
- component(s): core
- resolution: Fixed
- resolved: 2010-09-15T19:10:24+00:00
- votes: 0
- watchers: 0
- imported: 2025-11-24
Raw content of original issue
The user who can see the Hudson server from Web can see the WEB-INF/web.xml file etc. of the server with following URL.
http://(host of HUDSON_HOME)/static/(Arbitrary String)/WEB-INF/web.xml
For instance, it is http://ci.hudson-labs.org/static/ArbitraryString/WEB-INF/web.xml
I want to set not to see those to a general user.
- environment:
Tomcat 6.0.28
Activity
jenkins-infra-bot commentedon Sep 15, 2010
Raw content of original comment:
Code changed in stapler
User: : kohsuke
Path:
trunk/stapler/core/src/main/java/org/kohsuke/stapler/Stapler.java
https://stapler.dev.java.net/source/browse/stapler/trunk/stapler/core/src/main/java/org/kohsuke/stapler/Stapler.java?view=diff&rev=1619&p1=trunk/stapler/core/src/main/java/org/kohsuke/stapler/Stapler.java&p2=trunk/stapler/core/src/main/java/org/kohsuke/stapler/Stapler.java&r1=1618&r2=1619
Log:
[FIXED JENKINS-7457] Don't serve WEB-INF and stuff under it.
jenkins-infra-bot commentedon Sep 24, 2010
Raw content of original comment:
Code changed in hudson
User: : kohsuke
Path:
trunk/hudson/main/core/pom.xml
trunk/www/changelog.html
http://jenkins-ci.org/commit/35233
Log:
[FIXED JENKINS-7457] integrated toward 1.378
jenkins-infra-bot commentedon Sep 24, 2010
Raw content of original comment:
Integrated in
hudson_main_trunk #295
[FIXED JENKINS-7457] integrated toward 1.378
kohsuke :
Files :