Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-23027

[GSS](7.4.z) UNDERTOW-2015 - Undertow AJP listener does not ignore a query parameter that name and value are empty

    XMLWordPrintable

Details

    Description

      When a client sends a request with some query parameters which is empty key/value unexpectedly like the following:

      http://localhost/example/test.jsp?&foo1=bar1&foo2=bar2
      

      For the above request, ServletRequest#getParameterNames() should return foo1 and foo2.

      However, when the request comes through the AJP protocol, URLUtils' QueryStringParser#parse(), which is called from AjpRequestParser, adds an empty key/value param to HttpServerExchange in addition to foo1 and foo2. So, ServletRequest#getParameterNames() returns the different result.

      It appears that HttpRequestParser ignores such empty key/value query parameter, so it looks like AJP listener specific issue.

      Attachments

        Issue Links

          Activity

            People

              rhn-support-ivassile Ilia Vassilev
              rhn-support-mmiura Masafumi Miura
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: