Merge pull request #1277 from gaol/test_undertow-1981

[UNDERTOW-2025][UNDERTOW-1981] Test that client cannot access files inside of meta-info sub folder
undertow-io · Feb 6, 2022 · 8531ff7 · 8531ff7
2 parents cda3aae + cd40388
commit 8531ff7
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 0 deletions.
diff --git a/servlet/src/test/java/io/undertow/servlet/test/defaultservlet/DefaultServletTestCase.java b/servlet/src/test/java/io/undertow/servlet/test/defaultservlet/DefaultServletTestCase.java
@@ -259,6 +259,18 @@ public void testDisallowedResource() throws IOException {
         }
     }
 
+    @Test
+    public void testNoAccessToMetaInfResource() throws IOException {
+        TestHttpClient client = new TestHttpClient();
+        try {
+            HttpGet get = new HttpGet(DefaultServer.getDefaultServerURL() + "/servletContext/meta-inf/secret");
+            HttpResponse result = client.execute(get);
+            Assert.assertEquals(StatusCodes.NOT_FOUND, result.getStatusLine().getStatusCode());
+        } finally {
+            client.getConnectionManager().shutdown();
+        }
+    }
+
     @Test
     public void testDirectoryListing() throws IOException {
         TestHttpClient client = new TestHttpClient();

diff --git a/servlet/src/test/java/io/undertow/servlet/test/defaultservlet/meta-inf/secret b/servlet/src/test/java/io/undertow/servlet/test/defaultservlet/meta-inf/secret
@@ -0,0 +1 @@
+confidential