DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=6115>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=6115

URL encoding of session id doesn't work correctly with anchors/fragments

           Summary: URL encoding of session id doesn't work correctly with
                    anchors/fragments
           Product: Tomcat 4
           Version: Nightly Build
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: Catalina
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]


If an URI starts with a fragment identifier (e.g. '#anchor')
response.encodeURL() inserts the session id in front of it (result:
';jsessionid=...#anchor').
I think this is not the intended behaviour cause browsers don't interpret such
an URI as internal link of the current document.

org.apache.catalina.connector.HttpResponseBase.isEncodeable() checks if the
passed URI starts with '#' but this fails because encodeURL() passes the
resolved absolute URI to this method.

(PS: with Tomcat 4.0.1 the session id is appended to the anchor which is really
wrong.)

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to