DO NOT REPLY [Bug 15680] - Wellcome file redirect loses session

2003-11-21 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=15680.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=15680

Wellcome file redirect loses session

[EMAIL PROTECTED] changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution||FIXED



--- Additional Comments From [EMAIL PROTECTED]  2003-11-21 19:21 ---
Fixed in tomcat 4.1. Must add the following init parameter to web.xml: 
init-param
param-nameencodeRedirects/param-name
param-valuetrue/param-value
/init-param

By default the bahavior is off since encoding directories or welcome files may
cause backwards compatibility problems with some tomcat installations.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 15680] - Wellcome file redirect loses session

2003-10-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=15680.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=15680

Wellcome file redirect loses session

[EMAIL PROTECTED] changed:

   What|Removed |Added

Summary|Wellcome file redirect  |Wellcome file redirect loses
   |looses session  |session



--- Additional Comments From [EMAIL PROTECTED]  2003-10-24 18:37 ---
As far as I can tell, it's a pretty simple fix.  In
org.apache.catalina.servlets.DefaultServlet, there are two calls like:

response.sendRedirect(redirectPath)

in the method:

protected void serveResource(HttpServletRequest request, HttpServletResponse
response, boolean content)

They just need to be changed to:

response.sendRedirect(response.encodeRedirectURL(redirectPath));

And then the redirect will have the session ID included.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 15680] - Wellcome file redirect loses session

2003-10-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=15680.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=15680

Wellcome file redirect loses session





--- Additional Comments From [EMAIL PROTECTED]  2003-10-24 18:38 ---
Created an attachment (id=8728)
Patch against DefaultServlet.java that properly encodes URLs on redirect.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]