[jira] [Closed] (OFBIZ-10766) Impossible secure and autologin cookie names when mountpoint contains a slash inside its name

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[jira] [Closed] (OFBIZ-10766) Impossible secure and autologin cookie names when mountpoint contains a slash inside its name

Nicolas Malin (Jira)

     [ https://issues.apache.org/jira/browse/OFBIZ-10766?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jacques Le Roux closed OFBIZ-10766.
-----------------------------------
    Resolution: Fixed
      Assignee: Jacques Le Roux  (was: Deepak Nigam)

Thanks Deepak,

Yes I thought about it afterward, was sure you would spot it, as you did already ;)
 Fixed in
 trunk r1851998
 R18 r1851999
 R17 r1851200
 R16 r1851201

In R16 I finally put the same code than in other branches for autoLoginSet(), easier to backport and better anyway:
{code:java}
 autoLoginCookie.setSecure(true);
 autoLoginCookie.setHttpOnly(true);
{code}

> Impossible secure and autologin cookie names when mountpoint contains a slash inside its name
> ---------------------------------------------------------------------------------------------
>
>                 Key: OFBIZ-10766
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-10766
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: Trunk, Release Branch 16.11, Release Branch 17.12, Release Branch 18.12
>            Reporter: Jacques Le Roux
>            Assignee: Jacques Le Roux
>            Priority: Major
>             Fix For: 17.12.01, 16.11.06, 18.12.01
>
>         Attachments: OFBIZ-10766.patch, OFBIZ-10766.patch
>
>
> When you set a mountpoint which contains a slash inside its name (ie not only a slash as a trailer, which is possible), as it's needed with OFBIZ-10765, OFBiz tries to create a cookie with a slash in its name and [that's impossible|https://stackoverflow.com/questions/1969232/allowed-characters-in-cookies]. This was reported by [~mz4wheeler] on [ilscipio forum|https://forum.scipioerp.com/t/control-payment-type-options-in-store/215/53]



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)