-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sid,

On 5/4/2009 9:26 AM, Sid Sidney wrote:
> The secured resources are requested from an external page like this:
> 
> <form method="post"  
> action="http://localhost:8080/testApp/secured/userHome.do"; 
> name="userHomeForm">
> <input type="hidden" name="mydata" value="MYDATA"/>  
>   <input type="submit" value="Enter Here"/>  
> </form>
> 
> This my login.jsp.

Perhaps if you tell us what you're really trying to accomplish, we could
help you do it another way. I doubt very much that there's a business
requirement to provide access to a request parameter in a login page.
So, what's the /real/ business requirement?

> The values are always null when the requests are made
> via a "post". However, this works when the request is made via a "get".

I would guess that Tomcat is reading the request body into a buffer for
storage, but not bothering to make a copy of the parameters available to
the login page.

The spec isn't clear on this issue (making request parameters available
to the login page) so I'm pretty sure you'll get a less-than-warm
response to making this change to Tomcat. You can try, though. Patches,
as they say, are always welcome.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkn/WGwACgkQ9CaO5/Lv0PAGxwCcCNE4M18j8Rdpxgd6fmX9+UQi
NWMAoLH0XSFUYQ9GQ3b/DrRhpgXgfYa+
=TFpX
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to