Jetty

spaces wrongly encoded in cookies

Details

  • Type: Bug Bug
  • Status: Resolved Resolved
  • Priority: Major Major
  • Resolution: Fixed
  • Affects Version/s: 6.1.2rc0
  • Fix Version/s: 6.1.2rc2
  • Component/s: None
  • Labels:
    None
  • Environment:
    java version "1.5.0_11"
  • Number of attachments :
    0

Description

A space " " in a cookie should be encoded as "%20" not as "". With the current encoding of "" it never gets decoded back to a space.

Activity

Ascending order - Click to sort in descending order
Hide
Permalink
Franklin Schmidt added a comment -

Seems like Codehaus has encoding issues too, and messed up my description. Let me try again:

A space " " in a cookie should be encoded as "%20" not as "+". With the current encoding of "+" it never get decoded back to " ".

Show
Franklin Schmidt added a comment - Seems like Codehaus has encoding issues too, and messed up my description. Let me try again: A space " " in a cookie should be encoded as "%20" not as "+". With the current encoding of "+" it never get decoded back to " ".
Hide
Permalink
Greg Wilkins added a comment -

Fixed - using matching decode mechanism now

Show
Greg Wilkins added a comment - Fixed - using matching decode mechanism now
Hide
Permalink
Franklin Schmidt added a comment -

I see that "+" is now encoded as "%2B" and " " is encoded as "+". This is internally consistent but it does not match the behavior of JavaScript's escape() and unescape() . The problem is that I want to be able to use cookies from both Java and JavaScript, so it would be better if Jetty's encoding and decoding of cookies matched JavaScript's escape() and unescape() .

Show
Franklin Schmidt added a comment - I see that "+" is now encoded as "%2B" and " " is encoded as "+". This is internally consistent but it does not match the behavior of JavaScript's escape() and unescape() . The problem is that I want to be able to use cookies from both Java and JavaScript, so it would be better if Jetty's encoding and decoding of cookies matched JavaScript's escape() and unescape() .
Hide
Permalink
Greg Wilkins added a comment -

Cookies are now path encoded

Show
Greg Wilkins added a comment - Cookies are now path encoded

People

  • Assignee:
    Greg Wilkins
    Reporter:
    Franklin Schmidt
Vote (0)
Watch (0)

Dates

  • Created:
    Updated:
    Resolved: