0001032: Client access to WEB-INF/ directory should return SC_NOT_FOUND (404) as of Servlet-Spec 2.4

Viewing Issue Simple Details [ Jump to Notes ]

[ View Advanced ] [ Issue History ] [ Print ]

Category

Severity

Reproducibility

Date Submitted

Last Update

0001032

[Resin]

minor

always

04-02-06 08:14

04-03-06 15:55

Reporter

anonymous

View Status

public

Assigned To

ferg

Priority

normal

Resolution

fixed

Status

closed

Product Version

3.0.18

Summary

0001032: Client access to WEB-INF/ directory should return SC_NOT_FOUND (404) as of Servlet-Spec 2.4

Description

Java Servlet Specification Version 2.4, Chapter "SRV.9.5", Page 70 says:

<q>
Also, any requests from the client to access the resources in WEB-INF/ directory must be returned with a SC_NOT_FOUND(404) response.
</q>

When I acess "http://localhost:8080/WEB-INF/" [^] I got:

403 Forbidden
--------------------------------------------------------------------------------
Resin-3.0.18 (built Fri, 24 Feb 2006 02:47:03 PST)

Shouldn't it be a 404 to be conformable with Servlet Spec 2.4, or do I got something wrong?

Additional Information

Resin 3.0.18
Java 1.5
Windows XP Professional

Attached Files

Relationships

Notes
(0000999) ferg 04-03-06 15:55	server/1010

Issue History
Date Modified	Username	Field	Change
04-02-06 08:14	anonymous	New Issue
04-03-06 15:55	ferg	Assigned To	=> ferg
04-03-06 15:55	ferg	Status	new => closed
04-03-06 15:55	ferg	Resolution	open => fixed
04-03-06 15:55	ferg	Fixed in Version	=> 3.0.19
04-03-06 15:55	ferg	Note Added: 0000999

Mantis 1.0.0rc3[^]

28 total queries executed.
25 unique queries executed.