Details
Description
Some characters present in bad paths (typically seen from XSS attacks) can break the URI encoding of paths.
Need to add support for invalid path/filename characters, just to prevent the URI from becoming invalid.
Issue Links
- is depended upon by
-
JETTY-980
Security / Directory Listing XSS present
-
Adding support for '"', '\'', '<', '>' characters in URIUtil.encodePath()