Return-Path: Mailing-List: contact tomcat-dev-help@jakarta.apache.org; run by ezmlm Delivered-To: mailing list tomcat-dev@jakarta.apache.org Received: (qmail 51162 invoked from network); 30 Jun 2000 18:13:31 -0000 Received: from unknown (HELO mail.openave.com) (216.200.203.33) by locus.apache.org with SMTP; 30 Jun 2000 18:13:31 -0000 Received: from cagster ([63.205.189.253]) by mail.openave.com (Post.Office MTA v3.5.3 release 223 ID# 0-61060U3000L300S0V35) with SMTP id com for ; Fri, 30 Jun 2000 11:12:40 -0700 From: "Carroll Guertin Jr." To: "Tomcat" Subject: please take a second, just a second at least, to consider this cookie bug Date: Fri, 30 Jun 2000 11:06:21 -0700 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 X-Spam-Rating: locus.apache.org 1.6.2 0/1000/N Tomcat should send cookies down when servlets use redirects -- sending the browser to a different location. Right now this does NOT happen. More detail: The method HttpServletResponseFacade.sendRedirect clears the headers, which includes the cookies. Solution: ResponseImpl.reset() needs an option (flag maybe) so cookies may be kept. I hacked a fix for myself to enable quick integration into future releases of Tomcat, but I would spend time implementing a more elegant fix if there is interest in fixing this bug. Please let me know.