[jboss-jira] [JBoss JIRA] Commented: (JBWEB-161) Allow equals sign in version0 cookie values

[Mike Millson (JIRA)]

    [ https://jira.jboss.org/jira/browse/JBWEB-161?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12507969#action_12507969 ] 

Mike Millson commented on JBWEB-161:
------------------------------------

Test case:
1) Start JBoss with the following environment variable set:
org.apache.tomcat.util.http.ServerCookie.ALLOW_EQUALS_IN_VALUE=true
2) Deploy attached war.
3) Run attached JMeter test that sends a cookie named "mgm" with value "today=friday" to http://localhost:8080/testbox/servlet/ReadCookies, which prints out the cookie value.
4) The JMeter output file 1.html shows the value as just "today":
Name:mgm Value:today=friday Version:0
5) Apply the patch and run the same test. You get this output:
Name:mgm Value:today=friday Version:0 

> Allow equals sign in version0 cookie values
> -------------------------------------------
>
>                 Key: JBWEB-161
>                 URL: https://jira.jboss.org/jira/browse/JBWEB-161
>             Project: JBoss Web
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: Core
>            Reporter: Mike Millson
>            Assignee: Mike Millson
>         Attachments: testbox.war, TestVersion0Cookie.jmx
>
>
> If the request includes a Netscape Version0 cookie with an equals sign in the value, the value will get chopped off at the equal sign. For example, a value of "today=friday" will be read as "today". With Netscape Version0 cookies the equals sign is a valid value.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira