Uploaded image for project: 'Magnolia'
  1. Magnolia
  2. MAGNOLIA-3716

VirtualUriFilter does not encode redirect Uri

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 4.3.8
    • Fix Version/s: 4.4.5
    • Component/s: None
    • Labels:
      None
    • Patch included:
      Yes

      Description

      The VirtualUriFilter does an redirect via:

      response.sendRedirect(redirectUrl);

      on line 81. This is bad if used without cookies because the jsessionid is lost in some cases

      the better solution would be

      response.sendRedirect(response.encodeRedirectURL(redirectUrl));

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              dlipp Daniel Lipp
              Reporter:
              tom.kalmar Thomas Kalmar
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Date of First Response:

                  Checklists

                  Bug DoR
                  DoD