Bug 38012 - CGIServlet redirect
Summary: CGIServlet redirect
Alias: None
Product: Tomcat 5
Classification: Unclassified
Component: Servlets:CGI (show other bugs)
Version: 5.5.14
Hardware: Other Windows XP
: P2 normal (vote)
Target Milestone: ---
Assignee: Tomcat Developers Mailing List
Depends on:
Reported: 2005-12-22 20:04 UTC by Bob Faist
Modified: 2006-01-06 07:08 UTC (History)
0 users

CGIServlet.java file with patch appiled (72.75 KB, patch)
2005-12-22 20:07 UTC, Bob Faist
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Bob Faist 2005-12-22 20:04:10 UTC
The CGIServlet does not handle the scenario where the HTTP response is a
redirect status code (301, 302, 303).  I have a patch to handle the scenario.
Comment 1 Bob Faist 2005-12-22 20:05:49 UTC
diff of patch

$ diff CGIServlet.java.orig.java org/apache/catalina/servlets/CGIServlet.java
>           boolean isRedirectStatus = false;
>                           // if we received a redirect status and also
received a new location, lets go to it.
>                           if(isRedirectStatus == true &&
header.toLowerCase().equals("location")) {
>                           }
>                           // if we receive a redirect status (301, 302, 303),
>                           // then set boolean flag so when we get the
location, we can redirect to it.
>                           if(header.toLowerCase().equals("status")) {
if(value.contains(Integer.toString(HttpServletResponse.SC_MOVED_PERMANENTLY)) ||
value.contains(Integer.toString(HttpServletResponse.SC_MOVED_TEMPORARILY)) ||
value.contains(Integer.toString(HttpServletResponse.SC_SEE_OTHER))) {
>                                      isRedirectStatus = true;
>                              }
>                           }
Comment 2 Bob Faist 2005-12-22 20:07:18 UTC
Created attachment 17261 [details]
CGIServlet.java file with patch appiled
Comment 3 Mark Thomas 2005-12-29 15:07:30 UTC
This has been fixed in SVN for TC4 and TC5. I used a more general fix that
allows any status code to be set.
Comment 4 Bob Faist 2005-12-29 16:09:21 UTC
My testing of this patch did not work.  

I think you have to use the "sendRedirect()" method in the response object.

The call that was added to "setStatus()" for this patch is not being used in my
scenario as this is not a NPH response.

Here is the response lines which are being read in my application:

Content-Type: text/html; charset=ISO-8859-1
Status: 302 Moved
Set-Cookie: emsng_ietm_session_key=b4849b471b8fab616355598d151a92b5; path=/
Date: Thu, 29 Dec 2005 15:02:48 GMT
Location: http://bfaist-ws:8080/emsng_ietm/cgi-bin/IETM_Menu.pl

Comment 5 Mark Thomas 2005-12-29 19:45:13 UTC
Thanks for testing so quickly.

I have added handling for the CGI specific status header. My testing shows that
send redirect is unecessary since the redirect status code and the location
headers are both present.

Again, TC4 and TC5 patched.
Comment 6 Bob Faist 2005-12-29 19:58:49 UTC
My testing of the latest patch was successful.  Thanks Mark.