Wrong URL encoding in subsequent requests lead to errors

Hi,

this was originally a datatable issue, but I think it's more general.

Scenario :
Client: IE6
Server: Tomcat 5.5.23 or WebSphere 6.10.13
Server : Cookies are disabled, jsessionid is used
Acegi Security Filter installed as Servlet-Filter

After inital Server-Startup everything is ok. The initial requests are all good, the subsequent http-get requests are encoded properly with the correct jsessionid (GoodRequest.png). All "jsessionid"'s are the same.

Then after some time (maybe after the first server-side session-timeout) the requests have new generated jsessionid's as seen in "BadRequest.png".

The initial request has a jsessionid of "0000hDbhwXdCeE2aiOy-b3XOKtf:-1" which is correkt. Then the ECruiser-Scripts submit some "ec_resp" requests like this one:

 GET /casis-web/jsf/kennzahlen_eingeben/kennzahlen_eingeben_details.jsf;jsessionid=00006KdJaZmSuTnf-t9p-T3EMwa:-1?ec_resp=rO0ABXVyABNbTGphdmEubGFuZy5PYmplY3Q7kM5YnxBzKWwCAAB4cAAAAAJ0AChlY3J1aXNlci5zY3JpcHQuZnJhbWV3b3JrLkZyYW1ld29ya0dyb3VwdAAkZWNydWlzZXIuc2NyaXB0LmZyYW1ld29yay5JRVNwZWNpZmlj HTTP/1.1
 Accept: */*
 Accept-Encoding: gzip, deflate
 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)

The submitted jsessionid of "00006KdJaZmSuTnf-t9p-T3EMwa:-1" is a new id generated by the server.

Obviously some request are being made, without supplying the correct jsessionid. In this scenario the request is being redirected to the "login-page" and doesn't hit the application. Now it's clear why the script-error shows a

 "syntax error (line 2) (login.jsf;jsessionid=000..."

as in SyntayError.png

Any ideas how to fix this ?!

Hi there,

just for completeness. The workaround is to enable cookies. In this configuration the browser send's in any case the correkt jsessionid.


	Home \| News \| Contact \| About \| License \| Privacy \| Documentation
	Copyright © 2012 Simplica Corporation. All rights reserved.