Re: Problem with cookie values in 8.5.14

2017-04-26 Thread Igal @ Lucee.org
On 4/26/2017 12:48 PM, Mark Thomas wrote: I suggest you read the changelog for 8.5.x. Hint. Start with the entries for 8.5.0. Got it. I thought that this was a minor update. I've been running Tomcat 8.5.x for a while now so I guess I was not affected by that change. Thanks, Igal --

Re: Problem with cookie values in 8.5.14

2017-04-26 Thread Mark Thomas
On 26/04/17 20:35, Igal @ Lucee.org wrote: > On 4/26/2017 11:55 AM, Mark Thomas wrote: >> >> >> In short, yes there is a conflict. >> >> RFC 6265 does not permit ',' (and a bunch of other characters) to be >> used in the value and provides no escape or encoding syntax for >> including these charac

Re: Problem with cookie values in 8.5.14

2017-04-26 Thread Igal @ Lucee.org
On 4/26/2017 11:55 AM, Mark Thomas wrote: In short, yes there is a conflict. RFC 6265 does not permit ',' (and a bunch of other characters) to be used in the value and provides no escape or encoding syntax for including these characters. RFC 2109 allows quoted string to be used. In this Tomca

Re: Problem with cookie values in 8.5.14

2017-04-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 4/26/17 3:18 PM, Mark Thomas wrote: > On 26/04/17 20:13, Christopher Schultz wrote: >> On 4/26/17 2:55 PM, Mark Thomas wrote: > > > >>> RFC 2109 allows quoted string to be used. In this Tomcat can >>> (and will) do what needs to be done

Re: Problem with cookie values in 8.5.14

2017-04-26 Thread Mark Thomas
On 26/04/17 20:13, Christopher Schultz wrote: > On 4/26/17 2:55 PM, Mark Thomas wrote: >> RFC 2109 allows quoted string to be used. In this Tomcat can (and >> will) do what needs to be done to make the cookie value 'just >> work'. > So does 6265 just basically do-away with all attempts to quote

Re: Problem with cookie values in 8.5.14

2017-04-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 4/26/17 2:55 PM, Mark Thomas wrote: > On 26/04/17 19:07, Christopher Schultz wrote: > > > >> The log message says that the value of the cookie is >> "mqpp=1,kiosk=true" (without the quotes). >> >> The offending character (decimal 44...

Re: Problem with cookie values in 8.5.14

2017-04-26 Thread Mark Thomas
On 26/04/17 19:07, Christopher Schultz wrote: > The log message says that the value of the cookie is > "mqpp=1,kiosk=true" (without the quotes). > > The offending character (decimal 44... I was surprised it wasn't a hex > value) is a comma. I think either the Cookie class or Tomcat is > mis-man

Problem with cookie values in 8.5.14

2017-04-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I have this code in a servlet and it's throwing an exception (below): StringBuilder sb = ...; logger.trace("cookie value: " + sb.toString()); Cookie cookie = new Cookie(cookieName, sb.toString());