[WW-4136] Demonstrate proper input sanitizing for file download showcase example

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.3.15
• Fix Version/s: 2.3.15.1, 2.3.16
• Component/s: Example Applications
• Assignee: René Gielen
• Reporter: René Gielen
• Created: 05/Jul/13 17:09
• Updated: 05/Jul/13 18:41
• Resolved: 05/Jul/13 17:49

Description

inputPath parameter of FileDownloadAction is not sanitized to avoid accessing WEB-INF directory.

Originally reported by Takayoshi isayama of Mitsui Bussan Secure Directions, Inc..