[jira] [Reopened] (OFBIZ-10766) Impossible secure and autologin cookie names when mountpoint contains a slash inside its name

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-10766?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jacques Le Roux reopened OFBIZ-10766:
-------------------------------------

At https://markmail.org/message/lyl4hwijlp5nyinc Deepak Nigam reported that
bq. When there is one web app with the empty mount point (i.e. deployed on root), the auto-login cookie will not work for that particular webapp due to the change in the path of the cookie from "/" to "/" + applicationName. Because the system will try to find the cookie at the "/" but it is actually at "/" + applicationName.

> Impossible secure and autologin cookie names when mountpoint contains a slash inside its name
> ---------------------------------------------------------------------------------------------
>
>                 Key: OFBIZ-10766
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-10766
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: Trunk, Release Branch 16.11, Release Branch 17.12, Release Branch 18.12
>            Reporter: Jacques Le Roux
>            Assignee: Jacques Le Roux
>            Priority: Major
>             Fix For: 17.12.01, 16.11.06, 18.12.01
>
>
> When you set a mountpoint which contains a slash inside its name (ie not only a slash as a trailer, which is possible), as it's needed with OFBIZ-10765, OFBiz tries to create a cookie with a slash in its name and [that's impossible|https://stackoverflow.com/questions/1969232/allowed-characters-in-cookies]. This was reported by [~mz4wheeler] on [ilscipio forum|https://forum.scipioerp.com/t/control-payment-type-options-in-store/215/53]

--
This message was sent by Atlassian JIRA
(v7.6.3#76005)