Re: session lost with tomcat 4.1.21 (4.1.18) & utf-8 url's?

On Wed, 2003-03-26 at 05:08, Max Cooper wrote:

> Does anyone care to share their thoughts on UTF-encoding handling for
> url-patterns specified in securityfilter-config.xml? I presume that you
> should be allowed to use UTF-encoding to specify them in the config file,
> though I think you might be able to enter the UTF characters directly as
> well. Perhaps I will need to decode the url-patterns also. I am interested
> in any feedback on this, particularly how you would like to specify them in
> the config file.

Maybe the config file can follow the exact same rules for utf encoded
paths as browsers do, so that a path can be specified as
/main%2Fpages%2Fgroups . There's no need to use the % sign in any other
way anyway?

I think that securityfilter should decode the path, since when a browser
encounteres a url such as /pages/æøåæøåhmm/, it might choose to encode
the '/'s as well. Furthermore, a browser might encode with both
utf-8/16/32, and isolatin1 chars encodes differently in utf-8 than
utf-16.

The strange thing was that the session was lost. Did you find any
possible reason for that? My testing found that if the '/'s was not
utf-8 encoded, the session was intact.

-- 
Torgeir Veimo <[email protected]>



-------------------------------------------------------
This SF.net email is sponsored by:
The Definitive IT and Networking Event. Be There!
NetWorld+Interop Las Vegas 2003 -- Register today!
http://ads.sourceforge.net/cgi-bin/redirect.pl?keyn0001en