RFR: 8272758: Improve HttpServer to avoid partial file name matches while mapping request path to context path [v2]

[Michael McMahon]

On Wed, 21 Jan 2026 12:21:42 GMT, Volkan Yazici <vyazici at openjdk.org> wrote:

>> Currently `HttpServer` allows matching a request path `/foobar` to context path `/foo`. Replace this surprising behaviour with a safer approach by requiring exact *path prefix matches*.
>> 
>> 
>>          |           Request path
>>  Context +------+-------+----------+---------
>>   path   | /foo | /foo/ | /foo/bar | /foobar
>> ---------+------+-------+----------+---------
>>  /       |   Y  |   Y   |     Y    |    Y
>>  /foo/   |   N  |   Y   |     Y    |    N
>
> Volkan Yazici has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Add property to switch between prefix matching schemes

src/jdk.httpserver/share/classes/com/sun/net/httpserver/HttpServer.java line 287:

> 285:      * this context path matches request paths {@code /foo},
> 286:      * {@code /foo/bar}, or {@code /foobar}. Others may use <em>path prefix
> 287:      * matching</em> where {@code /foo} matches only request paths

Suggestion:

     * matching</em> where {@code /foo} matches request paths

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/29264#discussion_r2742167398