[JBPAPP-3220] JBWEB-153 - Parent context cookie overwriting URL encoded cookie - JBoss Issue Tracker

XML

Word

Printable

Affects:

Release Notes
Patch Instructions:

Hide
SHORT DESCRIPTION:
        Provide fix for ~~JBWEB-153~~.
LONG DESCRIPTION:
        Patch to prevent parent context cookie from overwriting URL encoded cookie
MANUAL INSTALL INSTRUCTIONS:
        Replace the existing %JBOSS_HOME%/server/%JBOSSCONF%/jboss-web.deployer/jbossweb.jar with the new jbossweb.jar
COMPATIBILITY:
       4.2.0.GA CP08, 4.3.0.GA CP07, 5.0.1
SUPERSEDES:
        N/A
CREATOR:
        Mike Millson
DATE:
        4-December-2009

Show
SHORT DESCRIPTION:         Provide fix for JBWEB-153 . LONG DESCRIPTION:         Patch to prevent parent context cookie from overwriting URL encoded cookie MANUAL INSTALL INSTRUCTIONS:         Replace the existing %JBOSS_HOME%/server/%JBOSSCONF%/jboss-web.deployer/jbossweb.jar with the new jbossweb.jar COMPATIBILITY:        4.2.0.GA CP08, 4.3.0.GA CP07, 5.0.1 SUPERSEDES:         N/A CREATOR:         Mike Millson DATE:         4-December-2009

When cookies are disabled for the context, a session cookie from a parent context will overwrite the session ID encoded in the URL.

incorporates

JBWEB-153 Parent context cookie overwriting URL encoded cookie

is related to

JBPAPP-3108 Allow URL rewriting in a mixed cookie URL rewriting environment