>Number:         3035
>Category:       mod_jserv
>Synopsis:       Sessions not working with Internet Explorer 4
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    jserv
>State:          open
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Mon Sep 21 08:30:01 PDT 1998
>Last-Modified:
>Originator:     [EMAIL PROTECTED]
>Organization:
apache
>Release:        1.0-dev
>Environment:
Linux rossg 2.0.33 #11 Sun Mar 22 16:19:48 /etc/localtime 1998 i686 unknown
>Description:
When using MSIE4, and using the Session interface, the browser has a habit of 
sending lines like the following in the HTTP request header :-

Cookie: MC=ID=12345; JServSessionId=<session_num>

JServUtil.parseCookieHeader(String) incorrectly parses these into name/value 
pairs such as MC=ID; 12345=JServSessionId; <session_num>=null.
>How-To-Repeat:
Run the commonly-found SessionServlet with Internet Explorer 4.
>Fix:
I have applied a patch to JServUtil in CVS, which I have found solves the 
problem satisfactorily.
>Audit-Trail:
>Unformatted:
[In order for any reply to be added to the PR database, ]
[you need to include <[EMAIL PROTECTED]> in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]
[If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request ]
[from a developer.                                      ]
[Reply only with text; DO NOT SEND ATTACHMENTS!         ]



Reply via email to