[jira] [Commented] (OFBIZ-10766) Impossible secure and autologin cookie names when mountpoint contains a slash inside its name

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-10766?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16736852#comment-16736852 ]

Jacques Le Roux commented on OFBIZ-10766:
-----------------------------------------

After Paul's comment in ilscipio forum, I thought about it and checked the cases where UtilHttp::getApplicationName is used. He is right there is no current issue with changing the name inside UtilHttp::getApplicationName.

I was misleaded, the problem I crossed with F# buttons in webpos was due to changing the webpos mountpoint to test/webpos. Anyway I'll not get back in OFBiz now, even if I think a future possible issue with the name inside UtilHttp::getApplicationName is not probable.

So beware using a slash in a mountpoint can have side effects beside needing to change the cookies names, at least in webpos.

> Impossible secure and autologin cookie names when mountpoint contains a slash inside its name
> ---------------------------------------------------------------------------------------------
>
>                 Key: OFBIZ-10766
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-10766
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: Trunk, Release Branch 16.11, Release Branch 17.12, Release Branch 18.12
>            Reporter: Jacques Le Roux
>            Assignee: Jacques Le Roux
>            Priority: Major
>             Fix For: 17.12.01, 16.11.06, 18.12.01
>
>
> When you set a mountpoint which contains a slash inside its name (ie not only a slash as a trailer, which is possible), as it's needed with OFBIZ-10765, OFBiz tries to create a cookie with a slash in its name and [that's impossible|https://stackoverflow.com/questions/1969232/allowed-characters-in-cookies]. This was reported by [~mz4wheeler] on [ilscipio forum|https://forum.scipioerp.com/t/control-payment-type-options-in-store/215/53]

--
This message was sent by Atlassian JIRA
(v7.6.3#76005)