You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@struts.apache.org by bu...@apache.org on 2003/04/03 00:39:10 UTC

DO NOT REPLY [Bug 18630] New: - html:rewrite html:img appends jsessionid with incorrect syntax

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=18630>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=18630

html:rewrite html:img appends jsessionid with incorrect syntax

           Summary: html:rewrite html:img appends jsessionid with incorrect
                    syntax
           Product: Struts
           Version: Nightly Build
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Major
          Priority: Other
         Component: Custom Tags
        AssignedTo: struts-dev@jakarta.apache.org
        ReportedBy: dan@mojavelinux.com


When you visit an application for the very first time (best just to test with
lynx -source which does not startup with any saved cookies) the jsessionid is
appended to urls just in case the client cannot accept a cookie (a method which
determines which session method to use).  When these urls are created, they use
an incorrect syntax which breaks all assets (graphics, stylesheets, etc).

An example is

myimage.jpg;jsessionid=SDFEWF324SDFWE234SD

if a query parameter is attached it looks like

myimage.jpg;jsessionid=DSFESFDCRDSF324DSF?foo=bar

this is clearly going to cause issues.

To reproduce this, simple create a jsp file using html:rewrite or html:img and
visit it using lynx -source or with a fresh startup of a browser (make sure the
cookies are not being used on the first visit).

---------------------------------------------------------------------
To unsubscribe, e-mail: struts-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: struts-dev-help@jakarta.apache.org