79851 - Session information lost when Java Plugin applet loaded

Reporter

Description

•

24 years ago

Ok, I have some source code that reproduces the problem. Although it is a java servlet/java applet combination (I hope that this isnt a problem). That source code is at the end of this bug. The problem is that between a http get and a http post the session information is lost when the http get returns html code to startup a java applet. This was not the case in mozilla 0.8.1 and has only appeared in mozilla 0.9. I tested the following code segment on the sources from the 8th May 2001. Here is the output (from my servlet) that I see: Starting tomcat. Check logs/tomcat.log for error messages 2001-05-10 08:18:45 - ContextManager: Adding context Ctx( /agile_inf ) 2001-05-10 08:18:45 - ContextManager: Adding context Ctx( /moz_test ) 2001-05-10 08:18:47 - PoolTcpConnector: Starting HttpConnectionHandler on 8080 2001-05-10 08:18:47 - PoolTcpConnector: Starting Ajp12ConnectionHandler on 8007 doGet Session ID is efrep4nqv1 doGet Session ID is efrep4nqv1 doPost Session ID is 43xgf2nqx1 As you can see between the doGet and doPost the session is invalidated and a new one is created. (They should remain the same). Note: I have confirmed that a html form post does not exhibit the same behaviour, that is the session ID remains the same. Anyhow here is my test code for the servlet (applet follows later). I hope that you wont have a problem getting a servlet container up and running and the class files in the appropriate places: All output goes to system out on both the server and the applet (plugin window) package mozilla_session_bug; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpSession; import javax.servlet.http.HttpUtils; import javax.servlet.ServletException; import java.io.*; public class Untitled1 extends HttpServlet { public Untitled1() { } protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, java.io.IOException { HttpSession session = req.getSession(); System.out.println("doGet Session ID is "+session.getId()); session.setAttribute("myattribute", "myString"); resp.setContentType("text/html"); PrintWriter out = new PrintWriter(resp.getOutputStream()); String myUrl = HttpUtils.getRequestURL(req).toString(); out.println("<html><body><form method=\"post\" action=\""+myUrl+"\">"); out.println("<input type=\"submit\" name=\"doPost\" value=\"Do Post\" />"); out.println("</form>"); out.println("<embed"); //out.println("codebase='mozilla_session_bug'"); out.println("code='mozilla_session_bug.UntitledApplet'"); out.println("align='baseline'"); out.println("type='application/x-java-applet;version=1.3'"); out.println("width='100%' url='"+myUrl+"'>"); out.println("<noembed>No support for Java 2 applets </noembed> </embed>"); out.println("</body></html>"); out.flush(); out.close(); } protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, java.io.IOException { HttpSession session = req.getSession(); System.out.println("doPost Session ID is "+session.getId()); resp.setContentType("text/html"); PrintWriter out = new PrintWriter(resp.getOutputStream()); Object value = session.getAttribute("myattribute"); if (value == null) { out.println("Oiii! The session lost the correct value"); } else if (value.equals("myString")) { out.println("<html><body><h1>Yes the session contained the correct value</h1></body></html>"); } else { out.println("<html><body><h1>No! the session did not contain the correct value (Wanted myString got "+session.getAttribute("myAttribute") +"</h1></body></html>"); } out.flush(); out.close(); } } APPLET CODE: package mozilla_session_bug; import javax.swing.JApplet; import java.io.*; import java.net.*; /** * Title: * Description: * Copyright: Copyright (c) 2001 * Company: * @author * @version 1.0 */ public class UntitledApplet extends JApplet { public UntitledApplet() { } public void start() { try { System.out.println("Started ..."); String serverURL = getParameter("url"); URL url = new URL(getDocumentBase(), serverURL); URLConnection connection = url.openConnection(); connection.setDoInput(true); connection.setDoOutput(true); connection.setUseCaches(false); connection.setRequestProperty("Content-Type", "text/xml"); PrintWriter out = new PrintWriter(connection.getOutputStream()); out.println("POST!"); out.flush(); out.close(); BufferedReader in = new BufferedReader(new InputStreamReader (connection.getInputStream())); String line = null; do { line = in.readLine(); System.out.println(line); } while (line != null); in.close(); } catch (Exception ex) { ex.printStackTrace(); } } }

UntitledApplet.java 24 years ago edburns (deleted), text/plain		Details
cvs diff -u of fix for moz side of this bug. 23 years ago edburns (deleted), patch		Details \| Diff \| Splinter Review
cvs diff -u of fix for moz side of this bug, second iteration 23 years ago edburns (deleted), patch		Details \| Diff \| Splinter Review
cvs diff -u of fix for this bug, third iteration 23 years ago edburns (deleted), patch		Details \| Diff \| Splinter Review
cvs diff -u of fix for this bug, fourth iteration 23 years ago edburns (deleted), patch		Details \| Diff \| Splinter Review