Skip to content

feat(http): replace getRequestURI() with getServletPath() - #6534

Merged
kuny0707 merged 1 commit into
tronprotocol:release_v4.8.1from
halibobo1205:feat/http_opt
Jan 30, 2026
Merged

feat(http): replace getRequestURI() with getServletPath()#6534
kuny0707 merged 1 commit into
tronprotocol:release_v4.8.1from
halibobo1205:feat/http_opt

Conversation

@halibobo1205

@halibobo1205 halibobo1205 commented Jan 30, 2026

Copy link
Copy Markdown
Collaborator

What does this PR do?

Replaces getRequestURI() with getContextPath() + getServletPath() for HttpServletRequest.

Why are these changes required?
Prevent bypass path traversal protections.

This PR has been tested by:

  • Unit Tests
  • Manual Testing

Follow up

Extra details

@kuny0707
kuny0707 merged commit 3d9eee7 into tronprotocol:release_v4.8.1 Jan 30, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants