[jira] [Commented] (OFBIZ-10766) Impossible secure and autologin cookie names when mountpoint contains a slash inside its name

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-10766?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16736321#comment-16736321 ]

Jacques Le Roux commented on OFBIZ-10766:
-----------------------------------------

I made a mistake trying to generalise changing UtilHttp::getApplicationName. This method is used in other places where the name should not be changed. Only cookies are concerned.
Rightly fixed in
trunk r1850685
R18 r1850686
R17 r1850687
R16 r1850688

> Impossible secure and autologin cookie names when mountpoint contains a slash inside its name
> ---------------------------------------------------------------------------------------------
>
>                 Key: OFBIZ-10766
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-10766
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: Trunk, Release Branch 16.11, Release Branch 17.12, Release Branch 18.12
>            Reporter: Jacques Le Roux
>            Assignee: Jacques Le Roux
>            Priority: Major
>             Fix For: 17.12.01, 16.11.06, 18.12.01
>
>
> When you set a mountpoint which contains a slash inside its name (ie not only a slash as a trailer, which is possible), as it's needed with OFBIZ-10765, OFBiz tries to create a cookie with a slash in its name and [that's impossible|https://stackoverflow.com/questions/1969232/allowed-characters-in-cookies]. This was reported by [~mz4wheeler] on [ilscipio forum|https://forum.scipioerp.com/t/control-payment-type-options-in-store/215/53]

--
This message was sent by Atlassian JIRA
(v7.6.3#76005)