Spring mvc:resources access to outside folder

Asked 7/11, 2011 at 19:59 Answered 26/11, 2022 at 13:32

Solved spring model-view-controller resources tags data-access

I have stored medias (pictures and movies) in a folder (for example C:\test\tes.png) and I'm trying to access to pictures with an url like : http://localhost:8080/app/picture/test.png. To do that, i have used resources tag (spring 3) as below :

<mvc:resources mapping="/picture/**" location="file:/test" />

When I try to access, I have an error with no more details.

Requested Resource Not Found

I have in logs :

2011-11-07 20:48:55,241 [http-8080-2] DEBUG org.springframework.web.servlet.DispatcherServlet - DispatcherServlet with name 'Family' processing GET request for [/Family/photos/testImage2.png] 2011-11-07 20:48:55,241 [http-8080-2] DEBUG org.springframework.web.servlet.handler.SimpleUrlHandlerMapping - Matching patterns for request [/photos/testImage2.png] are [/**] 2011-11-07 20:48:55,241 [http-8080-2] DEBUG org.springframework.web.servlet.handler.SimpleUrlHandlerMapping - URI Template variables for request [/photos/testImage2.png] are {} 2011-11-07 20:48:55,242 [http-8080-2] DEBUG org.springframework.web.servlet.handler.SimpleUrlHandlerMapping - Mapping [/photos/testImage2.png] to HandlerExecutionChain with handler [org.springframework.web.servlet.resource.DefaultServletHttpRequestHandler@3a779f5e] and 4 interceptors 2011-11-07 20:48:55,242 [http-8080-2] DEBUG org.springframework.web.servlet.DispatcherServlet - Last-Modified value for [/Family/photos/testImage2.png] is: -1 2011-11-07 20:48:55,242 [http-8080-2] DEBUG org.springframework.web.servlet.DispatcherServlet - Null ModelAndView returned to DispatcherServlet with name 'Family': assuming HandlerAdapter completed request handling 2011-11-07 20:48:55,242 [http-8080-2] DEBUG org.springframework.web.servlet.DispatcherServlet - Successfully completed request

I have certainly not all understand...

Another question : I'm not sure this is the good approach. What are others solutions to access to media on external folder ?

Thanks in advance !

Earplug answered 7/11, 2011 at 19:59 Comment(2)

Can you have a shortcut to the media folder in your webapp? – Sachsse 7/11, 2011 at 20:15

Check out the Spring Resources servlet. It may provide the functionality you want. – Molding 7/11, 2011 at 20:33

First question: "the mapping"

I am not 100% sure, but I would guess, there is a final / missing for the location. change it to:

<mvc:resources mapping="/picture/**" location="file:/test/" />

Another question : I'm not sure this is the good approach. What are others solutions to access to media on external folder ?

In my humble opinion, it is very bad practice to give an web site user full read access to an folder. Attention the access is not only limited to the folder, but the user can also access all sub folders.

*And even if you decided to ignore this warning, then you must test what happen if some use invoke http://localhost:8080/app/picture/../someFile.** I don't know what would happen, but **make 120% sure that nobody can access any file outside the picture Folder! -- I have had a look into the spring implementation, and it seams that spring already handle this issue.*Since Spring 3.2.12, 4.0.8, 4.1.2 the Resource Handler make sure that you an not access an folder outside the specified resource folder. (SPR-12354: Directory traversal with static resource handling (CVE-2014-3625))

Fulcher answered 7/11, 2011 at 20:30 Comment(1)

Thanks ralph for suggestions !You have certainly right for this practice so I have used a MediaServlet to retrieve them. See link for image example. Work greats! – Earplug 8/11, 2011 at 8:14

If your .js/.css/.img files are stored in drive d:\\ext_resources then add <mvc:resources> in spring configaration file. e.g. mvc-dispatcher-servlet.xml.xml file...

<mvc:resources mapping="/ext/**" location="file:d://ext_resources/"/>

This means /ext will indicate folder d:\\ext_resources, which contains .html/.jsp/.ftl/.jsf files.

<html>
    <link rel="stylesheet" href="/ext/style.css">
    <img src="/ext/avatar.jpg" height="100" width="100">
</html>

you can have sub-folder too in ext_resources folder like image folder. Then use subfolder in URL.

<img src="/ext/images/avatar.jpg" height="100" width="100">

Pendleton answered 26/11, 2022 at 13:32 Comment(0)

Recommended topics

Hot tags