[
https://issues.jboss.org/browse/AS7-1625?page=com.atlassian.jira.plugin.s...
]
Remy Maucherat commented on AS7-1625:
-------------------------------------
Why is using valid cookies never an option, and why is the server that doesn't accept
them always getting the blame ?
BTW, org.apache.tomcat.util.http.Cookie#processCookieHeader() is not getting rewritten
since it got rewritten recently with plenty of options (like
ALLOW_HTTP_SEPARATORS_IN_V0).
Cookies version 0 value rejected by
org.apache.tomcat.util.http.Cookies
-----------------------------------------------------------------------
Key: AS7-1625
URL:
https://issues.jboss.org/browse/AS7-1625
Project: Application Server 7
Issue Type: Bug
Components: Web
Affects Versions: 7.0.1.Final, 7.1.1.Final
Environment: standalone
Reporter: Ondrej Zizka
Assignee: Remy Maucherat
Labels: usability
I have a cookie in browser which was set for
redhat.com, so my AS 7 on
ozizka.brq.redhat.com is receiving it to.
Now that "version 0" cookie contains characters illegal acc. to RFC-2109 and
RFC-2068:
{code}
Cookie: s_vi=[CS]v1|261............[CE]; ...
{code}
AS 7 logs:
{code}
22:18:13,365 INFO [org.apache.tomcat.util.http.Cookies] (http--0.0.0.0-8080-2) Cookies:
Invalid cookie. Value not a token or quoted value
{code}
I haven't checked whether only the single value is discarded or all cookies.
Possibly related: JBPAPP-5813
Some related links:
Discussion
http://old.nabble.com/DO-NOT-REPLY--Bug-49525--New%3A-IE8%3A-Unabled-to-s...
and bug
https://issues.apache.org/bugzilla/show_bug.cgi?id=49525
about Tomcat 7's bug.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see:
http://www.atlassian.com/software/jira