0001032: Client access to WEB-INF/ directory should return SC_NOT_FOUND (404) as of Servlet-Spec 2.4

Viewing Issue Advanced Details [ Jump to Notes ]

[ View Simple ] [ Issue History ] [ Print ]

Category

Severity

Reproducibility

Date Submitted

Last Update

0001032

[Resin]

minor

always

04-02-06 08:14

04-03-06 15:55

Reporter

anonymous

View Status

public

Assigned To

ferg

Priority

normal

Resolution

fixed

Platform

Status

closed

Projection

none

OS Version

ETA

none

Fixed in Version

3.0.19

Product Version

3.0.18

Product Build

Summary

0001032: Client access to WEB-INF/ directory should return SC_NOT_FOUND (404) as of Servlet-Spec 2.4

Description

Java Servlet Specification Version 2.4, Chapter "SRV.9.5", Page 70 says:

<q>
Also, any requests from the client to access the resources in WEB-INF/ directory must be returned with a SC_NOT_FOUND(404) response.
</q>

When I acess "http://localhost:8080/WEB-INF/" [^] I got:

403 Forbidden
--------------------------------------------------------------------------------
Resin-3.0.18 (built Fri, 24 Feb 2006 02:47:03 PST)

Shouldn't it be a 404 to be conformable with Servlet Spec 2.4, or do I got something wrong?

Steps To Reproduce

Additional Information

Resin 3.0.18
Java 1.5
Windows XP Professional

Attached Files

Relationships

Notes
(0000999) ferg 04-03-06 15:55	server/1010

Issue History
Date Modified	Username	Field	Change
04-02-06 08:14	anonymous	New Issue
04-03-06 15:55	ferg	Assigned To	=> ferg
04-03-06 15:55	ferg	Status	new => closed
04-03-06 15:55	ferg	Resolution	open => fixed
04-03-06 15:55	ferg	Fixed in Version	=> 3.0.19
04-03-06 15:55	ferg	Note Added: 0000999

Mantis 1.0.0rc3[^]

28 total queries executed.
25 unique queries executed.