[STR-2238] <bean:include> always include Session id (if any) even for external Urls (href attribute)

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.2.4
• Fix Version/s: 1.2 Family
• Component/s: Tag Libraries
• Environment: Operating System: All; Platform: Sun
• Bugzilla Id: 31642
• Assignee: Ted Husted
• Reporter: patrick sard
• Created: 11/Oct/04 21:05
• Updated: 04/Jul/07 05:30
• Resolved: 04/Jul/07 05:30

Description

<bean:include> tag always include JSESSIONID session id - if any - even for
external urls specified via href attribute.
Despite the specification of the 'href' attribute:
"Absolute URL (including the appropriate protocol prefix such as "http:") of the
resource to be included. Because this URL could be external to the current web
application, the session identifier will NOT be included in the request."
-----------------------
Reason:
=======
This is due to a bug in the org.apache.struts.taglib.TagUtils class.

for now before proceeding with url rewriting ther's a test (line 566) which reads:
"if (pageContext.getSession() != null) {"

Instead it should read:
"if (( href == null ) && ( pageContext.getSession() != null )) {"