https://issues.apache.org/bugzilla/show_bug.cgi?id=53062

             Bug #: 53062
           Summary: Tomcat doesn't normalize absolute urls for redirect
           Product: Tomcat 7
           Version: trunk
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Servlet & JSP API
        AssignedTo: dev@tomcat.apache.org
        ReportedBy: mgrigo...@apache.org
    Classification: Unclassified


Created attachment 28582
  --> https://issues.apache.org/bugzilla/attachment.cgi?id=28582
A demo app that demonstrates the problem. Issue a request to /serv1 and check
the produced 'Location' response header

Issuing a redirect like:

  response.sendRedirect("./serv2");

will lead to a response header like:

  Location:http://localhost:8080/./serv2

and this causes problems for some not that smart user agents like Internet
Explorer and JMeter.

The problem has been reported few times in Apache Wicket's Jira.
Wicket works only with relative urls and lets the web container to make them
absolute when a redirect is needed. But it seems only Tomcat produces absolute
urls with '../' and/or './' inside and let the user agent to normalize them.
Other web containers normalize the url at the server side and make user agents
life easier.

See 
https://issues.apache.org/jira/browse/WICKET-2732
https://issues.apache.org/jira/browse/WICKET-4260

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to