RFR JDK8015799

Chris Hegarty chris.hegarty at oracle.com
Thu Jun 20 06:00:42 PDT 2013


On 06/20/2013 01:57 PM, John Zavgren wrote:
> Chris:
> Your idea of moving the empty string check so that it's header specific
> is prudent... that's less likely to have unforeseen consequences. I'll
> make the change ASAP.

and maybe a test?

-Chris.

>
> John
> On 06/20/2013 05:56 AM, Chris Hegarty wrote:
>> Thanks John,
>>
>> I just did a quick test with the testcase attached to the bug report (
>> below), and the server is indeed replying with a Set-Cookie header
>> with no value ( treated as empty string ) <sigh!>
>>
>> Since all header retrieval passes through filterHeaderField, in one
>> way or another, I'm a little concerned about changing this. Also, as
>> the only issue we know of is with Set-Cookie(2), maybe you could add
>> the empty string check to these headers only? ( that is to say, move
>> the 'value.length() == 0' check into the ' if
>> (SET_COOKIE.equalsIgnoreCase(name)..... '
>>
>> ----
>> public class EmptyCookieHeaderStringTest {
>>     public static void main(String[] args) throws IOException {
>>         CookieHandler.setDefault(new TestCookieHandler());
>>         URL url = new URL("http://www.walmart.com/msharbor/");
>>         HttpURLConnection c = (HttpURLConnection) url.openConnection();
>>         c.getHeaderFields();
>>     }
>> }
>>
>> class TestCookieHandler extends CookieHandler {
>>     @Override
>>     public Map<String, List<String>> get(URI uri, Map<String,
>> List<String>> requestHeaders) {
>>         return new HashMap<String, List<String>>();
>>     }
>>
>>     @Override
>>     public void put(URI uri, Map<String, List<String>> responseHeaders) {
>>     }
>> }
>> -----
>>
>> -Chris.
>>
>> On 06/19/2013 04:27 PM, John Zavgren wrote:
>>> Greetings:
>>>
>>> Please review the following changes for a bug that's caused by empty
>>> cookie header strings. The proposed change detects this condition and
>>> returns "early".
>>>
>>>
>>> http://cr.openjdk.java.net/~jzavgren/8015799/webrev.01/
>>> <http://cr.openjdk.java.net/%7Ejzavgren/8015799/webrev.01/>
>>>
>>> --
>>> John Zavgren
>>> john.zavgren at oracle.com
>>> 603-821-0904
>>> US-Burlington-MA
>>>
>



More information about the net-dev mailing list