jakarta-taglibs-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 33693] - <input:form> action parameter causes errors in WSRP portlets
Date Tue, 22 Feb 2005 20:08:44 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=33693>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=33693





------- Additional Comments From valeri_david@bah.com  2005-02-22 21:08 -------
Here is the scenario under which the issue occurs.

A JSR-168 Portlet uses a JSP to render its output. The JSP employs the
<input:form> tag to assist in the generation of a prepopulated form. The form is
to submit back to the portlet that is displaying the form. In order to do so,
the form's action URL must be generated using the portlet taglib or from a
RenderResponse. In the event that the portlet is exposed through WSRP, the URL
is specially encoded to enable client side URL rewriting (See the OASIS WSRP 1.0
Specification for more details on URL rewriting). The special encoding is
provided by the portlet container and is provided in the output of the portlet
taglib or the RenderResponse.createActionURL() method. When this specially
encoded URL is sent through the HttpServletResponse.encodeURL() method, the
rewrite encoding is destroyed and the URL becomes invalid to the WSRP consumer
when it is invoked.

Since the portlet container is responsible for properly encoding the URL
(regardless of the use of WSRP), the HTTPServletResponse.endodeURL() has the
potential to interfere with an already valid URL. To avoid this issue the taglib
would need to check if the current request is indeed a render request for a
portlet. In short, it is indeed the double encoding that is causing the problem,
but the situation is unavoidable when creating URLs for a JSR-168 portlet.


-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: taglibs-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: taglibs-dev-help@jakarta.apache.org


Mime
View raw message