Keith Wannamaker wrote:
> 
> 0x3b = ';'.  Ignacio is right, SessionID doesn't remove the id
> because it is not expecting ; to be encoded.  So now it shows
> up in the URI and has the side effect of breaking sessions
> that depend on url rewriting.  But, the spec does say the URL
> should be encoded, so I'd rather fix SessionID with this patch.

Without going into the spec pros and cons, I can confirm that this patch
works.

+1 (pragmatic)

Bojan

Reply via email to