felix-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sten Roger Sandvik (JIRA)" <j...@apache.org>
Subject [jira] Reopened: (FELIX-1713) getPathInfo wrongly returns path containing semicolon-separated attributes like ";jsessionid"
Date Tue, 06 Oct 2009 21:30:31 GMT

     [ https://issues.apache.org/jira/browse/FELIX-1713?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Sten Roger Sandvik reopened FELIX-1713:
---------------------------------------


Actually. Need to check this a little bit more.

> getPathInfo wrongly returns path containing semicolon-separated attributes like ";jsessionid"
> ---------------------------------------------------------------------------------------------
>
>                 Key: FELIX-1713
>                 URL: https://issues.apache.org/jira/browse/FELIX-1713
>             Project: Felix
>          Issue Type: Bug
>          Components: HTTP Service
>    Affects Versions: http-2.0.2
>            Reporter: Sid Fischer
>            Assignee: Sten Roger Sandvik
>             Fix For: http-2.0.4
>
>
> Since org.apache.felix.http.jetty-2.0.2/ org.apache.felix.http.base-2.0.2 calling HttpServletRequest.getPathInfo()
not only returns the raw path but additionally the semicolon-separated attributes, like ;jsessionid.
> Example (version 1.0.1):
> getRequestURI(): /test/foo;bar=baz
> getPathInfo(): /foo
> Example (version 2.0.2):
> getRequestURI(): /test/foo;bar=baz
> getPathInfo(): /foo;bar=baz
> Looks like in org/apache/felix/http/base/internal/handler/ServletHandler$RequestWrapper
the original HttpServletRequest is wrapped and getPathInfo() is overwritten using the String
retrieved from getRequestURI() including the attributes.
> This behaviour will break a lot of applications which rely on urlrewriting-based session
handling.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message