PQ94676: INCLUDED REQUEST PARAMETERS DO NOT MEET THE JAVA SERVLET SPEC [JAVAX.SERVLET.INCLUDE.QUERY_STRING <> GETQUERYSTRING()]

 Fixes are available

PQ94676; 5.1.1.1, 5.1.0.5: Incorrect value returned from getQueryString
5.1.1.8: WebSphere Application Server 5.1.1 Cumulative Fix 8 for AIX
5.1.1.8: WebSphere Application Server 5.1.1 Cumulative Fix 8 for Windows
5.1.1.8: WebSphere Application Server 5.1.1 Cumulative Fix 8 for HP-UX
5.1.1.8: WebSphere Application Server 5.1.1 Cumulative Fix 8 for Solaris
5.1.1.6: WebSphere Application Server Version 5.1.1 Cumulative Fix 6
5.1.1.7: WebSphere Application Server Version 5.1.1 Cumulative Fix 7
5.1.1.4: WebSphere Application Server Version 5.1.1 Cumulative Fix 4
5.1.1.8: WebSphere Application Server 5.1.1 Cumulative Fix 8 for Linux



APAR status
Closed as program error.

Error description
EXTERNAL SYMPTOMS: Included Request Parameters accessed by
getAttribute do not match the values of the request URI, context
path, servlet path, path info, and query string of the included
servlet.
(ie. javax.servlet.include.query_string and getQueryString() do
not match)


Java Servlet Specification, Version 2.4.
SRV.8.3.1 Included Request Parameters
Except for servlets obtained by using the getNamedDispatcher
method, a servlet that has been invoked by another servlet using
the include method of RequestDispatcher has access to the path
by which it was invoked.
The following request attributes must be set:
  javax.servlet.include.request_uri
  javax.servlet.include.context_path
  javax.servlet.include.servlet_path
  javax.servlet.include.path_info
  javax.servlet.include.query_string
These attributes are accessible from the included servlet via
the getAttribute method on the request object and their values
must be equal to the request URI, context path, servlet path,
path info, and query string of the included servlet,
respectively. If the request is subsequently included, these
attributes are replaced for that include. If the included
servlet was obtained by using the getNamedDispatcher method,
these attributes must not be set.
Local fix Problem summary
****************************************************************
* USERS AFFECTED: WebSphere Application Server applications    *
*                 that use include                             *
****************************************************************
* PROBLEM DESCRIPTION: In included resources, getQueryString   *
*                      had been changed. According to Servlet  *
*                      Spec 2.4, it should remain the same as  *
*                      the original queryString gotten from    *
*                      the client.                             *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************
Servlet Spec 2.3 is not clear about the rules of path methods
on requests in an included resource. Spec 2.4 clarified this
issue, and we should implement path methods as spec 2.4 states.
Problem conclusion
Implemented path methods for including based on Servlet spec
2.4, section SRV8.3.
Temporary fix Comments
APAR information
APAR number PQ94676
Reported component name WAS BASE 5.0
Reported component ID 5630A3600
Reported release 10W
Status CLOSED PER
PE NoPE
HIPER NoHIPER
Special Attention NoSpecatt
Submitted date 2004-09-21
Closed date 2004-10-15
Last modified date 2004-10-15

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Modules/Macros
WEBENG          

Publications Referenced

Fix information

Applicable component levels
R003 PSY    UP
R00A PSY    UP
R00H PSY    UP
R00I PSY    UP
R00P PSY    UP
R00S PSY    UP
R00W PSY    UP
R103 PSY    UP
R10A PSY    UP
R10H PSY    UP
R10I PSY    UP
R10P PSY    UP
R10S PSY    UP
R10W PSY    UP


Document Information


Product categories: Software > Application Servers > Distributed Application & Web Servers > WebSphere Application Server > General
Operating system(s):
Software version: 10W
Software edition:
Reference #: PQ94676
IBM Group: Software Group
Modified date: Oct 15, 2004