You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@knox.apache.org by "Sandeep More (Jira)" <ji...@apache.org> on 2020/12/08 12:27:00 UTC

[jira] [Created] (KNOX-2479) set-cookie headers broken when spaces between attributes are missing

Sandeep More created KNOX-2479:
----------------------------------

             Summary: set-cookie headers broken when spaces between attributes are missing
                 Key: KNOX-2479
                 URL: https://issues.apache.org/jira/browse/KNOX-2479
             Project: Apache Knox
          Issue Type: Bug
          Components: Server
            Reporter: Sandeep More
            Assignee: Sandeep More
             Fix For: 1.6.0


The assumption here is that SET-COOKIE header returned to Knox will always have spaces between the fields 

e.g.
{code:java}
SESSION=e69d3d08-7452-45cb-90bb-9cdde3fa1342; Path=/; HttpOnly{code}
Which is not the case when CM returns the SET-COOKIE header
{code:java}
SESSION=e69d3d08-7452-45cb-90bb-9cdde3fa1342;Path=/;HttpOnly
{code}
Which breaks the Knox logic. 

Examples in RFC [https://tools.ietf.org/html/rfc6265#section-2.2] have whitespace but they do not specify format. Since CM uses it and it was working up until now Knox should be fixed to support it.  



--
This message was sent by Atlassian Jira
(v8.3.4#803005)