users@glassfish.java.net

Re: Problem with URL handling

From: <glassfish_at_javadesktop.org>
Date: Tue, 27 Jan 2009 13:48:29 PST

> Salut,
>
> glassfish_at_javadesktop.org wrote:
> > Apparently Glassfish v2 (SJSAS 9.02) does not seem
> to be able to handle requests with a slash character
> embedded in the URL.
> >
> > For example,
> http://host/app/form/form_name%2Fwith_slash
>
> '%2F' should decode to a '/' character. Instead of
> performing a lookup, Glassfish drops the request.
> eurk nasty bug. The current behavior is broken in two
> places:
>
> (1) We should allow %2f if needed (as a property).
> (2) Event if not allowed, we should at relast return
> a proper error
> pages. Can you file an issue here:
>
> https://glassfish.dev.java.net/servlets/ProjectIssues
>
> Note that we have fixed the issue in GlassFish v3
> already if you want to
> try it (Prelude as well). I can certainly produce a
> patch for you to try
> on v2.
>
> Thanks
>
> -- Jeanfrancois
>
>
> >
> > The application that I'm using (Remedy Mid-Tier)
> maps a form servlet with the url path "/form/*". It
> then interprets the contents at the end of the path
> as a form name parameter. Therefore, any forms names
> with a slash character cause problems.
> >
> > So, does anyone have a suggestion on how to
> configure glassfish or work around the issue?
> >
> > Thanks!
> > [Message sent by forum member 'bryany' (bryany)]
> >
> >
> http://forums.java.net/jive/thread.jspa?messageID=3258
> 48
> >
> >
> ------------------------------------------------------
> ---------------
> > To unsubscribe, e-mail:
> users-unsubscribe_at_glassfish.dev.java.net
> > For additional commands, e-mail:
> users-help_at_glassfish.dev.java.net
> >
>

I tested the %2F behavior using Glassfish v3 Prelude. It appears that Glassfish returns a proper '404 Not Found' error rather than dropping the request. However, it still doesn't decode the URL properly (otherwise it would continue processing the request instead of returning an error).
[Message sent by forum member 'bryany' (bryany)]

http://forums.java.net/jive/thread.jspa?messageID=328486