[jira] Work started: (FELIX-1713) getPathInfo wrongly returns path containing semicolon-separated attributes like ";jsessionid"

["Sten Roger Sandvik (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/FELIX-1713?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Work on FELIX-1713 started by Sten Roger Sandvik.

> getPathInfo wrongly returns path containing semicolon-separated attributes like ";jsessionid"
> ---------------------------------------------------------------------------------------------
>
>                 Key: FELIX-1713
>                 URL: https://issues.apache.org/jira/browse/FELIX-1713
>             Project: Felix
>          Issue Type: Bug
>          Components: HTTP Service
>    Affects Versions: http-2.0.2
>            Reporter: Sid Fischer
>            Assignee: Sten Roger Sandvik
>             Fix For: http-2.0.4
>
>
> Since org.apache.felix.http.jetty-2.0.2/ org.apache.felix.http.base-2.0.2 calling HttpServletRequest.getPathInfo() not only returns the raw path but additionally the semicolon-separated attributes, like ;jsessionid.
> Example (version 1.0.1):
> getRequestURI(): /test/foo;bar=baz
> getPathInfo(): /foo
> Example (version 2.0.2):
> getRequestURI(): /test/foo;bar=baz
> getPathInfo(): /foo;bar=baz
> Looks like in org/apache/felix/http/base/internal/handler/ServletHandler$RequestWrapper the original HttpServletRequest is wrapped and getPathInfo() is overwritten using the String retrieved from getRequestURI() including the attributes.
> This behaviour will break a lot of applications which rely on urlrewriting-based session handling.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.