Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-29865

(7.4.z) ELY-2894 - FormAuthenticationMechanism needs to use getRawPath for redirect URL

XMLWordPrintable

      The FormAuthenticationMechanism constructs the redirect URL including the following line:

      sb.append(requestURI.getPath());

      If the original request URL included any escaped characters these will have been lost by the call to getPath() meaning the Location sent back to the caller after authentication will be invalid.

      Instead we need to call getRawPath() if we want to include it in the string concatenation.

       

              rhn-support-ivassile Ilia Vassilev
              darran.lofthouse@redhat.com Darran Lofthouse
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: