Bug 58836 - Query string parameters w/o values are not sent to dest servlet via request.getRequestDispatcher().forward()
Summary: Query string parameters w/o values are not sent to dest servlet via request.g...
Status: RESOLVED FIXED
Alias: None
Product: Tomcat 8
Classification: Unclassified
Component: Catalina (show other bugs)
Version: 8.0.28
Hardware: PC All
: P2 normal (vote)
Target Milestone: ----
Assignee: Tomcat Developers Mailing List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-01-12 04:28 UTC by Mark Olsson
Modified: 2016-01-13 15:02 UTC (History)
0 users



Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Mark Olsson 2016-01-12 04:28:46 UTC
URL / query string parameters with no value (technically keyless values) are not received by the destination servlet when using request.getRequestDispatcher().forward().

Example:
request.getRequestDispatcher("/newpage?P1=1&P2").forward(request,response);

The servlet handling /newpage will have P1 in the request parameter list but not P2 even though both parameters are in the query string verified with request.getQueryString().  The order and quantity of parameters doesn't seem to make a difference, those without values are not seen by the servlet, while those with values (or even with just an = but no value) are.

I believe the cause may be in ApplicationHttpRequest.mergeParameters().  Possibly the line "if (value == null)" should be replaced with if (queryParameters.containsKey(key)) (among other things), but I'm not 100% on that, building and debugging Tomcat is beyond my capabilities at this point.

I have a pair of test servlets that show this behavior on my development server if somebody wants to see it in action.  Email me safepassing2/gmail_com and I'll provide the address.
Comment 1 Mark Thomas 2016-01-13 11:37:10 UTC
Thanks for the report. I have written a simple test case that demonstrates this. You are right that the issue is in ApplicationHttpRequest.mergeParameters(). The problem is that it uses RequestUtil.parseParameters() to process the query string which ignores parameters with no value.

I'm currently looking into how to use the same parameter parsing code as is used for incoming requests. As well as fixing this issue, that should enable the RequestUtil code to be removed.
Comment 2 Mark Thomas 2016-01-13 15:02:57 UTC
This has been fixed in 9.0.x for 9.0.0.M2, 8.0.x for 8.0.31, 7.0.x for 7.0.68 and 6.0.x for 6.0.45.

Thanks again for the report.