RE: SSL/ORION/urlencoding

[Kesav Kumar]

If you get the URL appending the jsessionid at the end of query string then its a bug.  Please report this bug to the bug database.  If your jsessionid is appended after the query string then the session information won't be passed as part of the URL.  If the jsessionid is after the query string then the last parameter value will contain the jsessionid.  i.e if the URL is like http://xxxx/servlet/Test?param1=value1;jsessionid=xaddadsfdsfa

 

The param1 will have the total value of "value1;jsessionid=xafdafdsafdsdfas" which may cause lot of problems.  According the servlets spec the URL encoding should append the jsessionid before the querystring.

 

Kesav Kumar Kolla
Voquette Inc
650 356 3740(W)
510 889 6840(R)
Voquette....Delivering Sound Information

-----Original Message-----
From: remy.menetrieux [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, August 14, 2001 6:58 AM
To: Orion-Interest
Subject: Re: SSL/ORION/urlencoding

Sorry,
   I have found my error. I have created an orion-web.xml file in my/directorywebapp/WEB-INF/
   but orion read a orion-web.xml in $ORION-INSTALL-PATH/application-deployements/default/mywebappname/
thanks four you're help
remy

remy.menetrieux wrote:

[EMAIL PROTECTED] type="cite">When i enabled the cookie, the problem is the same.
  when i have a relative url like this <a href="dummy.htm?dummy1=3">blavla</a>
   orion transform in this <a href="dummy.htm?dummy1=3;jsessionid=AZSSZAZDSFCCDBFGH">blavla</a>  

I work with ssl.
Thanks in advance ..
Remy
Kesav Kumar wrote:

[EMAIL PROTECTED] type="cite">

I think if you disable cookies by default the auto encoding of URL will happen.  I don't think you can disable both cookies and encoding of urls.  If you disable both how do you expect your session management work?  You can enable both or either of one, but you can't disable both.

By the way the URL which you mentioned is orion generated or your copy paste?  The reason I asked the URL which you mentioned in the bottom is a wrong URL if orion generates(I hope not) this is a bug.  The jsessionid should be always before the query string.

Kesav Kumar Kolla
Voquette Inc
650 356 3740(W)
510 889 6840(R)
Voquette....Delivering Sound Information

-----Original Message-----
From: remy.menetrieux [maillto:[EMAIL PROTECTED]]
Sent: Monday, August 13, 2001 8:36 AM
To: Orion-Interest
Subject: Re: Orion-Interest subscription notification

Hi,
  I work with oC4J with ias, I have an web application with this
orion-web.xml :

<?xml version="1.0"?>
<!DOCTYPE orion-web-app PUBLIC "-//Evermind//DTD Orion Web Applic! ation
2.3//EN" "http://xmlns.oracle.com/ias/dtds/orion-web.dtd"
<http://xmlns.oracle.com/ias/dtds/orion-web.dtd>>

<orion-web-app
  deployment-version="1.0.2.2"
  jsp-cache-directory="./tmptest"
  temporary-directory="./tmptest"
  servlet-webdir="/servlet/"
 >
<session-tracking autoencode-absolute-urls="false"
autoencode-urls="false" autojoin-session="false" cookies="disabled" />

</orion-web-app>

but when i have relative url. orion add ;jsessionid=ASCDSQDQDf
! so i have url like this :
https://62.52.53.240:9999/remy/fiche.html?actioncode=list_cle_short;jsessionid=BEMHAMEGDJKL

Have yous some idea ??
thanks in advance