https://bugzilla.redhat.com/show_bug.cgi?id=1597418
--- Comment #3 from Doran Moppert <dmoppert(a)redhat.com> ---
Mitigation:
Information disclosure occurs when java.nio.file.InvalidPathException occurs
and is handled by the default Jetty error handler. To protect against this, a
custom error handler can be configured for that particular error or for a
larger set of errors according to the documentation link below. Red Hat Product
Security advises that production deployments on Jetty use custom error handlers
to limit the information disclosed and to ensure effective logging of error
conditions.
http://www.eclipse.org/jetty/documentation/current/custom-error-pages.html
--
You are receiving this mail because:
You are on the CC list for the bug.