Uploaded image for project: 'Undertow'
  1. Undertow
  2. UNDERTOW-1626

Cookie value is truncated on colon (':')

    XMLWordPrintable

Details

    • Bug
    • Resolution: Obsolete
    • Major
    • None
    • None
    • Servlet
    • None
    • Hide

      Attached a proof of concept project using gradle 6.0.1. Run the project with
      ./gradlew clean bootRun

      Perform a simple GET eg. using curl
      curl localhost:8080/test --cookie "USER_TOKEN=abc:def"

      The backend will print the cookie's value, but will only print "abc" when we'd expect to see the full string "abc:def".

      Show
      Attached a proof of concept project using gradle 6.0.1. Run the project with ./gradlew clean bootRun Perform a simple GET eg. using curl curl localhost:8080/test --cookie "USER_TOKEN=abc:def" The backend will print the cookie's value, but will only print "abc" when we'd expect to see the full string "abc:def".

    Description

      Creating a simple Spring-Boot project with a GET endpoint where we pass a cookie "USER_TOKEN" with value "Something:sometoken", when retrieving and printing the passed cookie's value we find it has been truncated on the first occurrence of the ':' character.

      Attachments

        Issue Links

          duplicates

          Bug - A problem that impairs or prevents the functions of the product. UNDERTOW-1716 Allow colon in the request cookie value regardless of setting ALLOW_HTTP_SEPARATORS_IN_V0

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved

          Activity

            People

              rhn-cservice-bbaranow Bartosz Baranowski
              flaviu-toader Flaviu-Dorin Toader (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: