[ 
https://issues.apache.org/jira/browse/SHINDIG-1382?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12888113#action_12888113
 ] 

Henry Saputra commented on SHINDIG-1382:
----------------------------------------

Hasan, if you are ok with Mat's solution we could use it for review. 

But your patch contain separate fix for DefaultJsUriManager.java right?

> MakeRequestHandler keeps and sends cookies regardless of contexes / users 
> etc. 
> -------------------------------------------------------------------------------
>
>                 Key: SHINDIG-1382
>                 URL: https://issues.apache.org/jira/browse/SHINDIG-1382
>             Project: Shindig
>          Issue Type: Bug
>          Components: Java
>    Affects Versions: 2.0.0-RC1
>         Environment: N/A
>            Reporter: Hasan Ceylan
>            Priority: Critical
>         Attachments: shindig-1382.patch, shindig-cookie.patch
>
>
> AFAIK, shindig switched to http-comps as the http library. 
> This library by default just like a browser caches the cookies returned by 
> the backend servers and re-uses those cookies all the time.
> Attached patch resolves the issues by rejecting validation of cookies with a 
> custom cookie policy.
> Regards,
> Hasan Ceylan  

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to