[seam-issues] [JBoss JIRA] Created: (JBSEAM-4660) RememberMe adds invalid path to Cookie

RememberMe adds invalid path to Cookie -------------------------------------- Key: JBSEAM-4660 URL: https://jira.jboss.org/browse/JBSEAM-4660 Project: Seam Issue Type: Bug Components: Security Affects Versions: 2.2.0.GA Reporter: Florian Specker When deploying into the root context of JBoss AS (war-file is names ROOT.war), the context path is the empty string. RememberMe checks the context path against null values before adding setting it in the Cookie, but not against empty values. A Cookie with the path set to "" is refused by some browsers (tested on Safari on iPhoneOS 3.1.3). When the path is set to /, the Cookie is accepted as expected. As a workaround, I subclassed RememberMe and overwrote getCookiePath(): @Override public String getCookiePath() { // do not send empty path - this confuses safari for iPhone String path = super.getCookiePath(); return "".equals(path) ? "/" : path; } -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira