getPathInfo wrongly returns path containing semicolon-separated attributes like
";jsessionid"
---------------------------------------------------------------------------------------------
Key: FELIX-1713
URL: https://issues.apache.org/jira/browse/FELIX-1713
Project: Felix
Issue Type: Bug
Components: HTTP Service
Affects Versions: http-2.0.2
Reporter: Sid Fischer
Since org.apache.felix.http.jetty-2.0.2/ org.apache.felix.http.base-2.0.2
calling HttpServletRequest.getPathInfo() not only returns the raw path but
additionally the semicolon-separated attributes, like ;jsessionid.
Example (version 1.0.1):
getRequestURI(): /test/foo;bar=baz
getPathInfo(): /foo
Example (version 2.0.2):
getRequestURI(): /test/foo;bar=baz
getPathInfo(): /foo;bar=baz
Looks like in
org/apache/felix/http/base/internal/handler/ServletHandler$RequestWrapper the
original HttpServletRequest is wrapped and getPathInfo() is overwritten using
the String retrieved from getRequestURI() including the attributes.
This behaviour will break a lot of applications which rely on
urlrewriting-based session handling.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
