[SHIRO-790] sessionIdUrlRewritingEnabled and InvalidRequestFilter conflict

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Done
• Affects Version/s: 1.6.0
• Component/s: Authentication (log-in), Session Management
• Assignee: Unassigned
• Reporter: imythu
• Created: 19/Aug/20 07:48
• Updated: 20/Aug/20 12:38
• Resolved: 20/Aug/20 12:38

Description

sessionIdUrlRewritingEnabled conflicts with InvalidRequestFilter. The default value of sessionIdUrlRewritingEnabled is true, so that the URL has ";". InvalidRequestFilter will filter URLs with ";" by default, and HTTP 400 (Invalid Request) appears in the response.