Path normalization issue with semicolon in Tomcat

I have observed a path normalization issue in the tomcat when i was passing “..;” in the URL. I tested this out with Nginx and Apache-tomcat-10.0.0-M4. I was able to access file directories which are not allowed in the Nginx. Please find the below screenshots for more information,

  1. Nginx Configuration:

Nginx Configuration:

As per the above configuration i have enabled /app/ context path only in Nginx.

  1. I created two directories called App (contains test.html) and App2 (contains test2.html) in the Tomcat ROOT directory.

enter image description here

  1. As per the above Nginx configuration it allows access only to app/test.html. But using semicolon it is possible to access app2/test2.html file as well.

Normal behavior

enter image description here

Behavior with the semicolon

enter image description here

As per the above screenshot, it is allowed to access to the test2.html page via Nginx with semicolon even app2 context path is not define in the Nginx configuration. Also please note that i checked this behavior without the Nginx and it was noted the same behavior. I was able to reproduced this issue directly in the Tomcat 9.0.12 and Tomcat 10.0.0-M4.

enter image description here

enter image description here

Is this already a known issue? or is this the normal behavior in the Tomcat level? A Similar issue has discussed in Blckhat(See below link for more details).

Semicolon delimited text field used in email workflow

unfortunately, I still have some forms on SharePoint 2007. Somehow, a workflow that was created by a previous person disappeared (grew legs and walked away? idk). I am looking to recreate this workflow but cant wrap my head around getting it done, here’s the scoop:

I have a form that allows for selection of multiple checkboxes. These checkbox selections are then concatenated (this step isn’t required if you dont think its needed, I just couldnt find a way to reference the selected checkboxes directly) into a text field like so:

XXXXX; YYYY; Selection3; Selection4; Selection5; etc.

I need my SharePoint workflow to look up each of these values (from another list) and find the corresponding emails to each of the values and then place those values (semicolon delimited) into the To: box to send the email.

So basically, it has to take Selection1 and reference the email list to find Selection1‘s corresponding email and place it into the To: box (and do that for every selection/concat them).

Thanks in advance for any help.