Re: Control character in cookie value or attribute

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 5/24/2011 5:28 PM, Caldarale, Charles R wrote: >> From: Christopher Schultz [mailto:ch...@christopherschultz.net] >> Subject: Re: Control character in cookie value or attribute > >> On 5/24/2011 5:09 PM

Re: Control character in cookie value or attribute

2011-05-24 Thread Dan Checkoway
Hope you don't mind...I opened a ticket for this: https://issues.apache.org/bugzilla/show_bug.cgi?id=51260 Dan On Tue, May 24, 2011 at 5:28 PM, Caldarale, Charles R wrote: >> From: Christopher Schultz [mailto:ch...@christopherschultz.net] >> Subject: Re: Control character i

RE: Control character in cookie value or attribute

2011-05-24 Thread Caldarale, Charles R
> From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Subject: Re: Control character in cookie value or attribute > On 5/24/2011 5:09 PM, Dan Checkoway wrote: > > -} else if (CookieSupport.isHttpToken(value) && > > -!CookieSuppor

Re: Control character in cookie value or attribute

2011-05-24 Thread Dan Checkoway
I wasn't gonna say anything about that, but I did consult my "operator precedence" reference while looking at it... :-) +1 on parens! Dan On Tue, May 24, 2011 at 5:21 PM, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Dan, > > On 5/24/2011 5:09 PM, Dan Checkow

Re: Control character in cookie value or attribute

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dan, On 5/24/2011 5:09 PM, Dan Checkoway wrote: > -} else if (CookieSupport.isHttpToken(value) && > -!CookieSupport.ALLOW_HTTP_SEPARATORS_IN_V0 || > -CookieSupport.isV0Token(value) && > -CookieSu

Re: Control character in cookie value or attribute

2011-05-24 Thread Dan Checkoway
Set-Cookie header, but I'd love to get to the bottom of it (I'm of the "no >> request left behind" mindset), and I'm still in the dark about what Tomcat >> doesn't like about what it's being passed. >> >> Can you guys shed any light on

Re: Control character in cookie value or attribute

2011-05-24 Thread Mark Thomas
t Tomcat > doesn't like about what it's being passed. > > Can you guys shed any light on what might evoke that "Control character in > cookie value or attribute" error in 7.0.14? One of the huge benefits of Tomcat is that it is open source so, if you know where to

Re: Control character in cookie value or attribute

2011-05-24 Thread Dan Checkoway
ed. Can you guys shed any light on what might evoke that "Control character in cookie value or attribute" error in 7.0.14? I still can't get my head wrapped around which ServerCookie.* property(ies) to tweak to try to figure this out. Thanks, Dan On Fri, May 20, 2011 at 4:56 PM,

Re: Control character in cookie value or attribute

2011-05-20 Thread Dan Checkoway
Ah, thanks! To be honest I'm not sure which of those properties would work around the "Control character in cookie value or attribute" exception. Maybe org.apache.tomcat.util.http. ServerCookie.FWD_SLASH_IS_SEPARATOR? I can't tell if "Control character" means a l

RE: Control character in cookie value or attribute

2011-05-20 Thread Caldarale, Charles R
> From: Dan Checkoway [mailto:dchecko...@gmail.com] > Subject: Control character in cookie value or attribute > I honestly have no idea if it's related to the tomcat version > or some legitimately wacked out Set-Cookie header coming in. Both, actually. Tomcat 7 is bit more pi

Control character in cookie value or attribute

2011-05-20 Thread Dan Checkoway
ing the request processing java.lang.IllegalArgumentException: Control character in cookie value or attribute. at org.apache.tomcat.util.http.CookieSupport.isHttpSeparator(CookieSupport.java:192) at org.apache.tomcat.util.http.Cookies.processCookieHeader(Cookies.java