Package: libmono-system-web2.0-cil
Version: 2.4.2.3+dfsg-2

System.Web.HttpServerUtility.Execute() (called from Transfer()) checks
for cookieless sessions and if so calls
System.Web.Util.UrlUtils.RemoveSessionId() on the provided path. This
assumes that there is in fact a session ID embedded in the path, and
drops any directories from the path if there isn't.

If web.config contains
   <sessionState mode="Off" cookieless="true" timeout="20" />
then Server.Transfer("~/foo/bar.aspx") 404's and
Server.Transfer("~/(x)/foo/bar.aspx") works (and goes to "~/foo/bar.aspx").

If web.config contains
   <sessionState mode="Off" cookieless="false" timeout="20" />
then Server.Transfer("~/foo/bar.aspx") works and
Server.Transfer("~/(x)/foo/bar.aspx") 404's.



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to