admin@glassfish.java.net

Broken Cookie Issue #10850

From: Ken Paulsen <Ken.Paulsen_at_Sun.COM>
Date: Thu, 05 Nov 2009 17:37:59 -0800

Hi Jan,

You made a change to Cookie.java which restricted certain characters from a cookie name:
svn diff -r26092:33813 Cookie.java
-    // Note -- disabled for now to allow full Netscape compatibility
-    // from RFC 2068, token special case characters
-    //
-    // private static final String tspecials = "()<>@,;:\\\"/[]?={} \t";
+    private static final String tspecials = "/()<>@,;:\\\"[]?={} \t";
 
-    private static final String tspecials = ",; ";

Woodstock uses "/" in one of the cookie they set.  This is resulting in our UI not functioning correctly (P2 issue filed: #10850 which is blocking testing).

Is this change necessary?  If so we're going to have to release a new version of Woodstock to fix this, which I would really prefer to avoid.

Let me know!

Thanks,

Ken