cancel
Showing results for 
Search instead for 
Did you mean: 

Path based vulnerability in hybris

0 Kudos
189

Hi,

We have a controller in hybris which have following annotations

Problem is we are able to access /about-us even with /about-us.anything

As per Spring documentation Here we have set the 'useDefaultSuffixPattern' property as false in spring-mvc-config.xml in platform.

Question - Is there a better way to do this? What does SAP recommends?

@Controller
@Scope("tenant")
@RequestMapping(value = "/about-us")

Accepted Solutions (0)

Answers (0)