From version 43.1
edited by Thomas Mortagne
on 2018/01/18
To version 44.1
edited by Vincent Massol
on 2018/03/01
Change comment: There is no comment for this version

Summary

Details

Page properties
Author
... ... @@ -1,1 +1,1 @@
1 -XWiki.ThomasMortagne
1 +XWiki.VincentMassol
Content
... ... @@ -289,18 +289,31 @@
289 289  
290 290  Set it to ##no## to turn off the Security Manager.
291 291  
292 -== Allowing "/" in page names ==
292 +== Allowing "/" and "\" in page names ==
293 293  
294 -Tomcat completely freaks out when there's a ##%2F## in URLs and it's not something that can be changed in XWiki. See [[this note>>http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.10]] for more information.
294 +Tomcat completely freaks out when there's a ##%2F## or ##%5C## in URLs and it's not something that can be changed in XWiki. See [[this note>>http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.10]] for more information.
295 295  
296 -You can configure Tomcat to allow this, by enabling :
296 +You can configure Tomcat to allow "/", by setting the following system property:
297 297  
298 298  {{code}}
299 299  org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH
300 300  {{/code}}
301 301  
302 -Note that if you're using Apache you also need to [[configure Apache to allow encoded / and \>>https://httpd.apache.org/docs/current/mod/core.html#allowencodedslashes]].
302 +And the following system property to allow "\":
303 303  
304 +{{code}}
305 +org.apache.catalina.connector.CoyoteAdapter.ALLOW_BACKSLASH=true
306 +{{/code}}
307 +
308 +So to have both:
309 +
310 +{{code}}
311 +-Dorg.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH=true
312 +-Dorg.apache.catalina.connector.CoyoteAdapter.ALLOW_BACKSLASH=true
313 +{{/code}}
314 +
315 +Note that if you're using the Apache web server, you also need to [[configure Apache to allow encoded / and \>>https://httpd.apache.org/docs/current/mod/core.html#allowencodedslashes]].
316 +
304 304  == NotSerializableException ==
305 305  
306 306  If you get the following:

Get Connected