Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-23027

[GSS](7.4.z) UNDERTOW-2015 - Undertow AJP listener does not ignore a query parameter that name and value are empty

XMLWordPrintable

      When a client sends a request with some query parameters which is empty key/value unexpectedly like the following:

      http://localhost/example/test.jsp?&foo1=bar1&foo2=bar2
      

      For the above request, ServletRequest#getParameterNames() should return foo1 and foo2.

      However, when the request comes through the AJP protocol, URLUtils' QueryStringParser#parse(), which is called from AjpRequestParser, adds an empty key/value param to HttpServerExchange in addition to foo1 and foo2. So, ServletRequest#getParameterNames() returns the different result.

      It appears that HttpRequestParser ignores such empty key/value query parameter, so it looks like AJP listener specific issue.

            rhn-support-ivassile Ilia Vassilev
            rhn-support-mmiura Masafumi Miura
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

              Created:
              Updated:
              Resolved: