On 6/2/10 12:32 PM, Bill Shannon wrote:
> And do they say why that can't, or shouldn't, be fixed?
No. The response was "I have discussed with Amy. We do have the issue."
:) It seems to me that the container SHOULD guard against this
specifically, but that's not my call to make.
> Does the servlet spec have anything to say about this behavior?
> Should it?
>
> I don't understand why it should *ever* automatically decode URLs.
>
> If I enter "http://java.sun.com%2fjavaee" in a browser, it fails
> as expected. What is depending on the decoding being done automatically?
I would expect that behavior as well. As to why the decode is being
done automatically, I can't even guess. I'm not even sure where in the
container that happens (though I know exactly where it happens for
4848-hosted end points).
> Being able to configure this per web app seems like a good compromise,
> in case there's code out there that depends on this.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: admin-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: admin-help_at_glassfish.dev.java.net
>
--
Jason Lee
Senior Member of Technical Staff
GlassFish Administration Console
Oracle Corporation
Phone x31197/+1 405-343-1964
Blog http://blogs.steeplesoft.com