[Performance Bug Report] Specific input cause endless loop in UrlResolver.java

[yinxiL]

Hi, we are working on the Algorithmic Complexity Denial-of-Service problem.
Our bug detection tool detected a performance bug from your code.

In UrlResolver.java, the method resolveUrl would hang for specific input.
The while loop at line 348 would not terminate when slashIndex < 0 (e.g., path = a/../) or "..".equals(pathSegment.substring(slashIndex)) (e.g. path = ../../), since the key variable path remains unchanged under these conditions.

[liukuan1]

您的邮件我已收到，我将及时查看！谢谢！