Re: Remember Me problems with Safari and IE 7

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--===============5108205839568118664==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature";
	boundary="------------enig30D7C0DF9FF371FBFD010730"

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig30D7C0DF9FF371FBFD010730
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Matthew,

Matthew Hixson wrote:
> The problem turns out to be Tomcat related.  Here are the Set-Cookie =20
> headers.
>=20
> With 6.0.16
> Set-Cookie: username=3DUne/tPQZ7PI=3D; Expires=3DSat, 04-Oct-2008 22:44=
:44 GMT
>=20
> With 6.0.18
> Set-Cookie: username=3D"Une/tPQZ7PI=3D"; Version=3D1; Max-Age=3D86400
>=20
> I was having troubles with Firefox working with the 6.0.16 version and =
=20
> Safari and IE had troubles with the 6.0.18 version.   6.0.16 is a =20
> version 0 cookie while 6.0.18 is a version 1 cookie.  The problem with =
=20
> version 0 cookies is that a cookie value with a '=3D' in it, as is the =
=20
> case with the username and password cookie values from SecurityFilter, =
=20
> causes ambiguity surrounding which part of the string is the name of =20
> the cookie and which part is the value.
>    The hack I have in place now is a servlet filter removes the =20
> cookies from the browser and then uses response.addHeader() to =20
> manually write the Set-Cookie header with the a cookie version 0 =20
> compatible value.

So what does your Set-Cookie header look like after the patch? Perhaps
sf should use your setHeader strategy instead of using setCookie to be
more compatible across browsers.

-chris


--------------enig30D7C0DF9FF371FBFD010730
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkjpDyYACgkQ9CaO5/Lv0PCYCQCff0OPp6a7aaEVN7nqLiG2VfL5
9MYAoLlulBet7VFZOqzfR4a6Pdud6Hpi
=FIUW
-----END PGP SIGNATURE-----

--------------enig30D7C0DF9FF371FBFD010730--


--===============5108205839568118664==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
--===============5108205839568118664==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
securityfilter-user mailing list
securityfilter-user-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
https://lists.sourceforge.net/lists/listinfo/securityfilter-user

--===============5108205839568118664==--