felix-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sten Roger Sandvik (JIRA)" <j...@apache.org>
Subject [jira] Commented: (FELIX-1713) getPathInfo wrongly returns path containing semicolon-separated attributes like ";jsessionid"
Date Tue, 06 Oct 2009 21:16:32 GMT

    [ https://issues.apache.org/jira/browse/FELIX-1713?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12762781#action_12762781
] 

Sten Roger Sandvik commented on FELIX-1713:
-------------------------------------------

Added fix for this in trunk. Need a little more testing, but I am pretty sure this will fix
getPathinfo() problem.

> getPathInfo wrongly returns path containing semicolon-separated attributes like ";jsessionid"
> ---------------------------------------------------------------------------------------------
>
>                 Key: FELIX-1713
>                 URL: https://issues.apache.org/jira/browse/FELIX-1713
>             Project: Felix
>          Issue Type: Bug
>          Components: HTTP Service
>    Affects Versions: http-2.0.2
>            Reporter: Sid Fischer
>            Assignee: Sten Roger Sandvik
>             Fix For: http-2.0.4
>
>
> Since org.apache.felix.http.jetty-2.0.2/ org.apache.felix.http.base-2.0.2 calling HttpServletRequest.getPathInfo()
not only returns the raw path but additionally the semicolon-separated attributes, like ;jsessionid.
> Example (version 1.0.1):
> getRequestURI(): /test/foo;bar=baz
> getPathInfo(): /foo
> Example (version 2.0.2):
> getRequestURI(): /test/foo;bar=baz
> getPathInfo(): /foo;bar=baz
> Looks like in org/apache/felix/http/base/internal/handler/ServletHandler$RequestWrapper
the original HttpServletRequest is wrapped and getPathInfo() is overwritten using the String
retrieved from getRequestURI() including the attributes.
> This behaviour will break a lot of applications which rely on urlrewriting-based session
handling.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message