Details
-
Bug
-
Status: Closed
-
Critical
-
Resolution: Fixed
-
1.2.4
-
None
-
Operating System: All
Platform: Sun
-
31642
Description
<bean:include> tag always include JSESSIONID session id - if any - even for
external urls specified via href attribute.
Despite the specification of the 'href' attribute:
"Absolute URL (including the appropriate protocol prefix such as "http:") of the
resource to be included. Because this URL could be external to the current web
application, the session identifier will NOT be included in the request."
-----------------------
Reason:
=======
This is due to a bug in the org.apache.struts.taglib.TagUtils class.
for now before proceeding with url rewriting ther's a test (line 566) which reads:
"if (pageContext.getSession() != null) {"
Instead it should read:
"if (( href == null ) && ( pageContext.getSession() != null )) {"