[EMAIL PROTECTED] wrote:

-                path = apr_strtok(apr_pstrdup(pool, path), "?&", &q);
+                path = apr_strtok(apr_pstrdup(pool, path), ";?&", &q);

-1.  Semicolon is a perfectly valid character in a session-id, so that
risks breaking other apps.  The fact that Tomcat treats it as a
separator doesn't commit other appservers to do the same.  There's a
case for mod_jk-compatibility in mod_proxy_ajp, not mod_proxy_balancer.

(Unless someone convinces me otherwise)

I'd be fine with the change if it were made configurable:
e.g. add a const char *sep argument to the function.

--
Nick Kew

Reply via email to