Summary: | LegacyCookieProcessor does not allow the Cookie header with the Path attribute including the leading slash under specific conditions | ||
---|---|---|---|
Product: | Tomcat 9 | Reporter: | Kyohei Nakamura <nakamura.kyohei.lab> |
Component: | Catalina | Assignee: | Tomcat Developers Mailing List <dev> |
Status: | RESOLVED FIXED | ||
Severity: | normal | ||
Priority: | P2 | ||
Version: | unspecified | ||
Target Milestone: | ----- | ||
Hardware: | All | ||
OS: | All | ||
Attachments: | patch against trunk |
Description
Kyohei Nakamura
2016-08-02 09:27:33 UTC
Thanks for the report, the analysis (which was spot on) and the patch. This has been fixed in: 9.0.x for 9.0.0.M10 onwards 8.5.x for 8.5.5 onwards 8.0.x for 8.0.37 onwards |