Skip to content

Reject unsafe static resource locations in MVC and WebFlux #36695

Closed
Closed
Reject unsafe static resource locations in MVC and WebFlux#36695
Assignees
bclozel
Labels
in: webIssues in web modules (web, webmvc, webflux, websocket)type: enhancementA general enhancement
Milestone
7.1.0-M1

Description

@bclozel
bclozel
opened on Apr 23, 2026

This if a follow up of #36692, this time rejecting entirely unsafe locations before the application starts up.

Metadata

Metadata

Assignees

Labels

in: webIssues in web modules (web, webmvc, webflux, websocket)type: enhancementA general enhancement

Type

No type

Projects

No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions