Bugs item #587085, was opened at 2002-07-26 18:03
Message generated for change (Comment added) made by letiemble
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=376685&aid=587085&group_id=22866

Category: None
Group: None
>Status: Closed
>Resolution: Works For Me
Priority: 5
Submitted By: g. griffin (gwghome)
>Assigned to: Laurent Etiemble (letiemble)
Summary: Cookie contents changed on output

Initial Comment:
When a servlet creates a cookie with the contents:

       abc#def&hij&lmn

Jboss replaces the "#" and "&" chars with their HTTP
escape seqences, so the cookie that is actually sent to
the client is:

        abc%23def%26hij%26lmn

I have run the same code on Tomcat (stand-alone),
Enhydra, Resin, Jigsaw and JServ, all of which do not
replace the characters with the escape sequences. 
Stand-alone Jetty, however, does replace them.

This problem was first seen using
jboss-3.0.0_tomcat-4.0.3 on Linux, but it also occurs
with jboss-3.0.0.

This behavior should be considered a bug for the
following reasons:

1. When the application retrieves the cookie, the
contents ot that cookie differ from what the
application originally wrote.  Since the application
expects the cookie to be in the original format, this
causes errors.  The alternative is that the application
must put in a work-around that checks for escape
sequences un-escapes them.  This kludge is ONLY needed
on Jboss and Jetty, not on any of the other servers.

2. The W3 HTTP reference implementation (Jigsaw) does
not replace the characters with escape sequences.

3. The Jboss-Tomcat combination does not exhibit the
same behavior as stand-alone Tomcat.

4. This makes it harder to port applications from one
server to another.  Since most of the other servers do
not make this replacement, and given the previous
reasons, it would seem to be appropriate to change
Jboss to operate as the others do.

Note that based on reasons 1, 2, and 4, the stand-alone
Jetty product should be changed as well, but since I am
using Jboss-Tomcat, that is not an issue for this bug
report.


----------------------------------------------------------------------

>Comment By: Laurent Etiemble (letiemble)
Date: 2003-10-10 14:15

Message:
Logged In: YES 
user_id=437455

I ran the servlet-examples web application from the Tomcat
distribution on JBoss 3.0.8.
The described behaviour doesn't occur when testing with the
Cookie demo.


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=376685&aid=587085&group_id=22866


-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php
_______________________________________________
JBoss-Development mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-development

Reply via email to