ninja

Class AssetsControllerHelper

java.lang.Object

ninja.AssetsControllerHelper

public class AssetsControllerHelper
extends Object

Constructor Summary

Constructors

Constructor and Description
AssetsControllerHelper()

Method Summary

Modifier and Type	Method and Description
String	normalizePathWithoutLeadingSlash(String fileName, boolean enforceUnixSeparator) If we get - for whatever reason - a relative URL like assets/../conf/application.conf we expand that to the "real" path.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AssetsControllerHelper

public AssetsControllerHelper()

Method Detail

normalizePathWithoutLeadingSlash

public String normalizePathWithoutLeadingSlash(String fileName,
                                               boolean enforceUnixSeparator)

If we get - for whatever reason - a relative URL like assets/../conf/application.conf we expand that to the "real" path. In the above case conf/application.conf. You should then add the assets prefix. Otherwise someone can create an attack and read all resources of our app. If we expand and normalize the incoming path this is no longer possible.

Parameters:

fileName - A potential "fileName"

enforceUnixSeparator - If true it will force the usage of the unix separator '/' If false it will use the separator of the underlying system. usually '/' in case of unix and '\' in case of windows.

Returns:

A normalized fileName.