Uploaded image for project: 'Struts 1'
  1. Struts 1
  2. STR-2238

<bean:include> always include Session id (if any) even for external Urls (href attribute)

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Critical
    • Resolution: Fixed
    • 1.2.4
    • 1.2 Family
    • Tag Libraries
    • None
    • Operating System: All
      Platform: Sun
    • 31642

    Description

      <bean:include> tag always include JSESSIONID session id - if any - even for
      external urls specified via href attribute.
      Despite the specification of the 'href' attribute:
      "Absolute URL (including the appropriate protocol prefix such as "http:") of the
      resource to be included. Because this URL could be external to the current web
      application, the session identifier will NOT be included in the request."
      -----------------------
      Reason:
      =======
      This is due to a bug in the org.apache.struts.taglib.TagUtils class.

      for now before proceeding with url rewriting ther's a test (line 566) which reads:
      "if (pageContext.getSession() != null) {"

      Instead it should read:
      "if (( href == null ) && ( pageContext.getSession() != null )) {"

      Attachments

        Activity

          People

            husted Ted Husted
            psard patrick sard
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: