Re: How to disable URL rewriting for session id?

2005-07-04 Thread Julian Kerr

David G. Friedman wrote:


I just skimmed through cvs and have this idea for you:

Edit a copy of the Html Taglib's helper class,
org.apache.struts.taglibs.TagUtils, so any methods
that would pull in the session variable to append to
the new URL don't do that.  When it's built, put
it under WEB-INF/classes/org/apache/struts/taglibs
so Struts calls YOUR class, not the original.
 



David,

Nice plan!

I basically did as you suggested, and automatic URL rewriting no longer 
takes place.


(Removed calls to HttpServletResponse.encodeURL within 
org.apache.struts.taglib.TagUtils and org.apache.struts.taglib.html.FormTag)


Thanks,
Julian

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: How to disable URL rewriting for session id?

2005-07-03 Thread David G. Friedman
Julian,

I just skimmed through cvs and have this idea for you:

Edit a copy of the Html Taglib's helper class,
org.apache.struts.taglibs.TagUtils, so any methods
that would pull in the session variable to append to
the new URL don't do that.  When it's built, put
it under WEB-INF/classes/org/apache/struts/taglibs
so Struts calls YOUR class, not the original.

I recommend reviewing the public Map computeParameters
method right after the comment:
// Add our transaction control token (if requested)

I'm sure older versions have some similar helper class
you can override with your own, for now.

FYI, to view this file on the web from the CVS/SVN repository, follow (this
will be wrapped, so you'll have to cut and paste it):
http://svn.apache.org/viewcvs.cgi/struts/taglib/trunk/src/java/org/apache/st
ruts/taglib/TagUtils.java?rev=202155&view=markup

Regards,
David

-Original Message-
From: Julian Kerr [mailto:[EMAIL PROTECTED]
Sent: Monday, July 04, 2005 1:25 AM
To: Struts Users Mailing List
Subject: Re: How to disable URL rewriting for session id?


Ahh, the problem spreadeth... also need to use plain old forms, which
means no struts help there either.

Guess this boils down to either finding a way to tell struts to stop
rewriting url's, or another moving to another context...

Julian


Wendy Smoak wrote:

>From: "Julian Kerr" <[EMAIL PROTECTED]>
>
>
>>A plain old html link would do the trick, but I'm keen to know if there
>>is a way to control the behaviour struts tags.
>>
>>
>>
>
>Just based on the docs, I'd say no... but I haven't looked any further than
>that.
>
>http://struts.apache.org/userGuide/struts-html.html#link
> says
>" URL rewriting will be applied automatically, to maintain session state in
>the absence of cookies. "
>
>Can you do URL-rewriting-in-reverse on the front end, and strip off the
>;jsessionid on the way in, before it causes a problem?
>
>Otherwise a plain old HTML link sounds like the way to go.
>
>
>


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: How to disable URL rewriting for session id?

2005-07-03 Thread Julian Kerr
Ahh, the problem spreadeth... also need to use plain old forms, which 
means no struts help there either.


Guess this boils down to either finding a way to tell struts to stop 
rewriting url's, or another moving to another context...


Julian


Wendy Smoak wrote:


From: "Julian Kerr" <[EMAIL PROTECTED]>
 


A plain old html link would do the trick, but I'm keen to know if there
is a way to control the behaviour struts tags.

   



Just based on the docs, I'd say no... but I haven't looked any further than
that.

http://struts.apache.org/userGuide/struts-html.html#link
says
" URL rewriting will be applied automatically, to maintain session state in
the absence of cookies. "

Can you do URL-rewriting-in-reverse on the front end, and strip off the
;jsessionid on the way in, before it causes a problem?

Otherwise a plain old HTML link sounds like the way to go.

 




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: How to disable URL rewriting for session id?

2005-07-01 Thread Wendy Smoak
From: "Julian Kerr" <[EMAIL PROTECTED]>
>
> A plain old html link would do the trick, but I'm keen to know if there
> is a way to control the behaviour struts tags.
>

Just based on the docs, I'd say no... but I haven't looked any further than
that.

http://struts.apache.org/userGuide/struts-html.html#link
 says
" URL rewriting will be applied automatically, to maintain session state in
the absence of cookies. "

Can you do URL-rewriting-in-reverse on the front end, and strip off the
;jsessionid on the way in, before it causes a problem?

Otherwise a plain old HTML link sounds like the way to go.

-- 
Wendy Smoak


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: How to disable URL rewriting for session id?

2005-07-01 Thread Julian Kerr

Michael Jouravlev wrote:


On 6/30/05, Julian Kerr <[EMAIL PROTECTED]> wrote:
 


The html:link tag automatically applies URL rewriting to maintain
session state in the absence of cookies. Is it possible to disable this
feature?
   



Have you tried   <%@ page session="false" %>   ?

Michael.
 



I am using sessions, but track them with cookies.

I'd like to disable url rewriting because of the combination of:
1) empirical testing shows that url rewriting sometimes occurs even when 
cookies are enabled
2) my context doesn't deal with rewritten url's (as described in the 
initial post)


If I can turn url rewriting off, the application will work in the given 
context for people with cookies enabled.


A plain old html link would do the trick, but I'm keen to know if there 
is a way to control the behaviour struts tags.


-- Julian

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: How to disable URL rewriting for session id?

2005-06-30 Thread Michael Jouravlev
On 6/30/05, Julian Kerr <[EMAIL PROTECTED]> wrote:
> The html:link tag automatically applies URL rewriting to maintain
> session state in the absence of cookies. Is it possible to disable this
> feature?

Have you tried   <%@ page session="false" %>   ?

Michael.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]