eclipse-ee4j / eclipse-ee4j/jersey
Allow to configure UriBuilder not to support ..
Open
- Dominant language
- Java
- Stars
- 730
- Forks
- 382
- PR merge metrics
- No merged PRs in 30d
Description
- [RFC 3986, Section 5.2.4](https://datatracker.ietf.org/doc/html/rfc3986#section-5.2.4), mandates for supporting `..` in the URI.
- https://owasp.org/www-community/attacks/Path_Traversal warns for attacks when using `..` and its encoded variants.
Contributor guide
Assessment
This issue has not been assessed yet.