Details
-
Bug
-
Resolution: Fixed
-
Blocker
-
5.2-rc-1
-
Unit
-
Unknown
-
N/A
-
Description
This is a regression caused by https://github.com/xwiki/xwiki-platform/commit/0e858f0292c7e8dec9809d3227b5a8d341aaf52b#diff-2 from XWIKI-9437
The call to encoreURL means that when cookies are turned off the URL returned contains JSESSIONID in it and thus RSS reader clients receive URLs of the type:
http://www.xwiki.org/xwiki/bin/view/Blog/Bug+Fixing+Day+35;jsessionid=0AF95AFB8997826B936C0397DF6A0C7F?language=en http://www.xwiki.org/xwiki/bin/view/Blog/Bug+Fixing+Day+35;jsessionid=74B43AF9C1DC4AD080397B89948941A7?language=en http://www.xwiki.org/xwiki/bin/view/Blog/Bug+Fixing+Day+35;jsessionid=2C0D7F572894AA98351868F76AD6E7DB?language=en http://www.xwiki.org/xwiki/bin/view/Blog/Bug+Fixing+Day+35;jsessionid=1FF8620BF79D7DFB99DBCD4C5ED20448?language=en http://www.xwiki.org/xwiki/bin/view/Blog/Bug+Fixing+Day+35;jsessionid=6AD132D21DE65433B5469ACAFA7C5F16?language=en ...
We need to ensure that JESSIONID is not sent in computed URLs.
Attachments
Issue Links
- relates to
-
XWIKI-9600 RSS feed readers still receive the same blog post entries from XWiki several times
- Closed