[
https://issues.apache.org/jira/browse/FELIX-1713?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sten Roger Sandvik reassigned FELIX-1713:
-----------------------------------------
Assignee: Sten Roger Sandvik
> getPathInfo wrongly returns path containing semicolon-separated attributes
> like ";jsessionid"
> ---------------------------------------------------------------------------------------------
>
> Key: FELIX-1713
> URL: https://issues.apache.org/jira/browse/FELIX-1713
> Project: Felix
> Issue Type: Bug
> Components: HTTP Service
> Affects Versions: http-2.0.2
> Reporter: Sid Fischer
> Assignee: Sten Roger Sandvik
> Fix For: http-2.0.4
>
>
> Since org.apache.felix.http.jetty-2.0.2/ org.apache.felix.http.base-2.0.2
> calling HttpServletRequest.getPathInfo() not only returns the raw path but
> additionally the semicolon-separated attributes, like ;jsessionid.
> Example (version 1.0.1):
> getRequestURI(): /test/foo;bar=baz
> getPathInfo(): /foo
> Example (version 2.0.2):
> getRequestURI(): /test/foo;bar=baz
> getPathInfo(): /foo;bar=baz
> Looks like in
> org/apache/felix/http/base/internal/handler/ServletHandler$RequestWrapper the
> original HttpServletRequest is wrapped and getPathInfo() is overwritten using
> the String retrieved from getRequestURI() including the attributes.
> This behaviour will break a lot of applications which rely on
> urlrewriting-based session handling.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
