public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
-    HttpSession session = request.getSession();
-    OperatorLoginInfo operatorLoginInfo = null;
-    try {
-      operatorLoginInfo = OperatorLoginInfo.getLoginOperator(session);
-      if (runLog.isTraceEnabled())
-        runLog.trace("current operatorLoginInfo is " + operatorLoginInfo
-            .getLoginName());
-    } catch (PlatformException e) {
-      runLog.warn(null, (Throwable)e);
-      response.setContentType("application/octet-stream");
-      (new ObjectOutputStream((OutputStream)response.getOutputStream()))
-        .writeUnshared("SESSION_ERROR");
-      response.getOutputStream().flush();
-      return;
-    }
-    try {
-      Map<Integer, Set<Number>> resources = (operatorLoginInfo == null) ? null : operatorLoginInfo.getResources();
-      ValidatingObjectInputStream is = new ValidatingObjectInputStream((InputStream)request.getInputStream());
-      Class<?>[] classTypes = new Class[2];
-      classTypes[0] = Class.forName("com.h3c.imc.fault.applet.MgrReqMsg");
-      classTypes[1] = Class.forName("[B");
-      is.accept(classTypes);
-      Object o = is.readObject();
-      if (!(o instanceof MgrReqMsg)) {
-        runLog.error("received data type is not MgrReqMsg!");
-        return;
-      }
-      MgrReqMsg msg = (MgrReqMsg)o;
-      String methodName = new String(msg.methodName);
-      String className = new String(msg.className);
-      Object objRet = null;
-      MgrReqMsg resp = null;
-      if ("accessMgrServlet".equals(className))
-        if ("checkSeesion".equals(methodName)) {
-          String value = session.getId();
-          runLog.debug("check server session = " + value);
-          resp = new MgrReqMsg(className, methodName, value, false);
-          response.setContentType("application/octet-stream");
-          ObjectOutputStream objectOutputStream = new ObjectOutputStream((OutputStream)response.getOutputStream());
-          objectOutputStream.writeUnshared(resp);
-          response.getOutputStream().flush();
-          return;
-        }
-      if (this.faultBoardMgr != null && "faultBoardMgr".equals(className)) {
-        boolean needReturn = false;
-        if ("readFaultAppletData".equals(methodName)) {
-          needReturn = true;
-          objRet = this.faultBoardMgr.readFaultAppletData(resources);
-        } else if ("clearLoadFlag".equals(methodName)) {
-          needReturn = true;
-          objRet = null;
-          this.faultBoardMgr.clearLoadFlag();
-        } else if ("queryAllFaultTypeMap".endsWith(methodName)) {
-          needReturn = true;
-          objRet = this.faultBoardMgr.queryAllFaultTypeMap();
-        } else if ("queryAppletLoopInterval".endsWith(methodName)) {
-          needReturn = true;
-          objRet = Integer.valueOf(this.faultBoardMgr.queryAppletLoopInterval());
-        }
-        if (needReturn) {
-          if (objRet == null)
-            return;
-          response.setContentType("application/octet-stream");
-          ObjectOutputStream objectOutputStream = new ObjectOutputStream((OutputStream)response.getOutputStream());
-          objectOutputStream.writeUnshared(objRet);
-          response.getOutputStream().flush();
-          return;
-        }
-      }
-      Object data = null;
-      if (msg.isAsn) {
-        if (msg.msgcls != null) {
-          BERDecoder de = new BERDecoder(msg.data);
-          Object object = Class.forName(new String(msg.msgcls)).newInstance();
-          data = object;
-          ((ASN1Type)data).decode((ASN1Decoder)de);
-        }
-      } else if (msg.msgcls != null) {
-        data = Class.forName(new String(msg.msgcls)).newInstance();
-      }
-      Object bean = null;
-      Class<?> cls = null;
-      if (ServerContext.getRootAppContext().containsBean(className))
-        bean = ServerContext.getRootAppContext().getBean(className);
-      try {
-        if (bean == null) {
-          String regex = "[a-zA-Z]+[0-9a-zA-Z_]*";
-          if (Pattern.matches(regex, className))
-            bean = FacesUtils.getValueExpressionObject("#{" + className + "}");
-        }
-      } catch (Exception e) {
-        runLog.debug(null, e);
-      }
-      if (bean == null) {
-        runLog.warn("the bean " + className + " does not exist.");
-        return;
-      }
-      cls = bean.getClass();
-      List<Class<?>> classList = new ArrayList<>();
-      int rs = 1;
-      int addReq = 2;
-      int addPri = 4;
-      int addData = 8;
-      if (msg.request) {
-        classList.add(HttpServletRequest.class);
-        rs |= addReq;
-      }
-      if (msg.isPrivilege) {
-        classList.add(Map.class);
-        rs |= addPri;
-      }
-      if (msg.msgcls != null) {
-        classList.add(Class.forName(new String(msg.msgcls)));
-        rs |= addData;
-      }
-      Class<?>[] argv = new Class[classList.size()];
-      argv = (Class[])classList.<Class<?>[]>toArray((Class<?>[][])argv);
-      Method m = cls.getMethod(methodName, argv);
-      if (rs == 1) {
-        objRet = m.invoke(bean, new Object[0]);
-      } else if (rs == 3) {
-        objRet = m.invoke(bean, new Object[] { request });
-      } else if (rs == 5) {
-        objRet = m.invoke(bean, new Object[] { resources });
-      } else if (rs == 9) {
-        objRet = m.invoke(bean, new Object[] { data });
-      } else if (rs == 7) {
-        objRet = m.invoke(bean, new Object[] { request, resources });
-      } else if (rs == 11) {
-        objRet = m.invoke(bean, new Object[] { request, data });
-      } else if (rs == 13) {
-        objRet = m.invoke(bean, new Object[] { resources, data });
-      } else if (rs == 15) {
-        objRet = m.invoke(bean, new Object[] { request, resources, data });
-      } else {
-        runLog.error("request proc failed, quest code is " + rs);
-        runLog.error("request proc failed, quest MgrReqMsg is " + msg.toString());
-        return;
-      }
-      if (objRet == null)
-        return;
-      resp = new MgrReqMsg(className, methodName, objRet, false);
-      response.setContentType("application/octet-stream");
-      ObjectOutputStream oos = new ObjectOutputStream((OutputStream)response.getOutputStream());
-      oos.writeUnshared(resp);
-      response.getOutputStream().flush();
-    } catch (Exception e) {
-      runLog.warn(null, e);
-      return;
-    }
   }

   public void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
-    response.setContentType("text/html; charset=GBK");
-    PrintWriter out = response.getWriter();
-    out.println("<htmlnode>");
-    out.println("<body>");
-    out.println("<p>ok</p>");
-    out.println("</body></html>");
   }

   private static URI normalizeSyntax(URI uri) {
     if (uri.isOpaque())
       return uri;
     String path = (uri.getPath() == null) ? "" : uri.getPath();
     String[] inputSegments = path.split("/");
     Stack<String> outputSegments = new Stack<>();
     for (String inputSegment : inputSegments) {
       if (inputSegment.length() != 0 &&
         !".".equals(inputSegment))
-        if ("..".equals(inputSegment) || StringUtils.equalsIgnoreCase("%2e%2e", inputSegment)) {
+        if ("..".equals(inputSegment) || StringUtils.equalsIgnoreCase("%2e%2e", inputSegment) ||
+          StringUtils.equalsIgnoreCase(".%2e", inputSegment) ||
+          StringUtils.equalsIgnoreCase("%2e.", inputSegment)) {
           if (!outputSegments.isEmpty())
             outputSegments.pop();
         } else {
           outputSegments.push(inputSegment);
         }
     }
     StringBuilder outputBuffer = new StringBuilder();
     for (String outputSegment : outputSegments)
       outputBuffer.append('/').append(outputSegment);
     if (path.lastIndexOf('/') == path.length() - 1)
       outputBuffer.append('/');
     try {
       String scheme = uri.getScheme().toLowerCase();
       String auth = uri.getAuthority().toLowerCase();
       URI ref = new URI(scheme, auth, outputBuffer.toString(), null, null);
       if (uri.getQuery() == null && uri.getFragment() == null)
         return ref;
       StringBuilder normalized = new StringBuilder(ref.toASCIIString());
       if (uri.getQuery() != null)
         normalized.append('?').append(uri.getRawQuery());
       if (uri.getFragment() != null)
         normalized.append('#').append(uri.getRawFragment());
       return URI.create(normalized.toString());
     } catch (URISyntaxException e) {
       throw new IllegalArgumentException(e);
     }
   }

   private static String normalizeSyntax(String path) {
     if (!StringUtils.contains(path, "..") && !StringUtils.containsIgnoreCase(path, "..") &&
-      !StringUtils.containsIgnoreCase(path, "%2e%2e"))
+      !StringUtils.containsIgnoreCase(path, "%2e%2e") &&
+      !StringUtils.containsIgnoreCase(path, ".%2e") &&
+      !StringUtils.containsIgnoreCase(path, "%2e."))
       return path;
     String[] inputSegments = path.split("/");
     Stack<String> outputSegments = new Stack<>();
     for (String inputSegment : inputSegments) {
       if (inputSegment.length() != 0 &&
         !".".equals(inputSegment))
-        if ("..".equals(inputSegment) || StringUtils.equalsIgnoreCase("%2e%2e", inputSegment)) {
+        if ("..".equals(inputSegment) || StringUtils.equalsIgnoreCase("%2e%2e", inputSegment) ||
+          StringUtils.equalsIgnoreCase(".%2e", inputSegment) ||
+          StringUtils.equalsIgnoreCase("%2e.", inputSegment)) {
           if (!outputSegments.isEmpty())
             outputSegments.pop();
         } else {
           outputSegments.push(inputSegment);
         }
     }
     StringBuilder outputBuffer = new StringBuilder();
     for (String outputSegment : outputSegments)
       outputBuffer.append('/').append(outputSegment);
     if (path.lastIndexOf('/') == path.length() - 1)
       outputBuffer.append('/');
     return outputBuffer.toString();
   }