getPathInfo wrongly returns path containing semicolon-separated attributes like ";jsessionid" ---------------------------------------------------------------------------------------------
Key: FELIX-1713 URL: https://issues.apache.org/jira/browse/FELIX-1713 Project: Felix Issue Type: Bug Components: HTTP Service Affects Versions: http-2.0.2 Reporter: Sid Fischer Since org.apache.felix.http.jetty-2.0.2/ org.apache.felix.http.base-2.0.2 calling HttpServletRequest.getPathInfo() not only returns the raw path but additionally the semicolon-separated attributes, like ;jsessionid. Example (version 1.0.1): getRequestURI(): /test/foo;bar=baz getPathInfo(): /foo Example (version 2.0.2): getRequestURI(): /test/foo;bar=baz getPathInfo(): /foo;bar=baz Looks like in org/apache/felix/http/base/internal/handler/ServletHandler$RequestWrapper the original HttpServletRequest is wrapped and getPathInfo() is overwritten using the String retrieved from getRequestURI() including the attributes. This behaviour will break a lot of applications which rely on urlrewriting-based session handling. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.