Uploaded image for project: 'Undertow'
  1. Undertow
  2. UNDERTOW-2676

Do not set merged query parameters for includes and forwards on the exchange, only the request

XMLWordPrintable

      In UNDERTOW-2269, a new method was added to merge query parameters from an existing request with those provided during a forward or include.

      This implementation erroneously modifies the underlying HttpServerExchange (or shared parameter map) directly. As a result, the merged parameters persist in the ServletRequest even after the include returns.

      According to Section 9.1.1 of the Jakarta Servlet Specification (6.0), parameters specified in a RequestDispatcher are scoped strictly to the include or forward call and must not be visible to the calling page after the dispatch completes.

      Expected Behavior: The merged parameters should be visible only to the target resource (via a Request Wrapper or scoped query map). The original exchange and the ServletRequest seen by the caller must remain unchanged.

      For details see the requesting dispatching in the specification.

              jperkins-rhn James Perkins
              jperkins-rhn James Perkins
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: