PI31292: GETPATHINFO RETURNS A SEMI-COLON FOR THE ";XXXX" APPENDED AFTER THE REQUEST URI

8.5.5.6: WebSphere Application Server V8.5.5 Fix Pack 6
8.0.0.11: WebSphere Application Server V8.0 Fix Pack 11
8.5.5.7: WebSphere Application Server V8.5.5 Fix Pack 7
8.5.5.8: WebSphere Application Server V8.5.5 Fix Pack 8
8.0.0.12: WebSphere Application Server V8.0 Fix Pack 12
8.5.5.9: WebSphere Application Server V8.5.5 Fix Pack 9
8.5.5.10: WebSphere Application Server V8.5.5 Fix Pack 10
8.5.5.11: WebSphere Application Server V8.5.5 Fix Pack 11
8.0.0.13: WebSphere Application Server V8.0 Fix Pack 13
8.5.5.12: WebSphere Application Server V8.5.5 Fix Pack 12
8.0.0.14: WebSphere Application Server V8.0 Fix Pack 14
8.5.5.13: WebSphere Application Server V8.5.5 Fix Pack 13
8.0.0.15: WebSphere Application Server V8.0 Fix Pack 15
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14
8.5.5.15: WebSphere Application Server V8.5.5 Fix Pack 15
8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
8.5.5.20: WebSphere Application Server V8.5.5.20
8.5.5.18: WebSphere Application Server V8.5.5 Fix Pack 18
8.5.5.19: WebSphere Application Server V8.5.5 Fix Pack 19
8.5.5.16: WebSphere Application Server V8.5.5 Fix Pack 16
8.5.5.21: WebSphere Application Server V8.5.5.21

APAR status

• Closed as program error.

Error description

• When sending the request URL with ";xxx" appended at the end of
  the URL, the getPathInfo() returns ";xxx" instead of NULL.
  For example: http://hostname:port/test.jsp;xxx
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  IBM WebSphere Application Server Full       *
  *                  Profile version 8.0 and 8.5.5, and Liberty  *
  *                  Profile version 8.5.5 users of              *
  *                  WebContainer.                               *
  ****************************************************************
  * PROBLEM DESCRIPTION: If the inbound request URI contains a   *
  *                      semi-colon then                         *
  *                      HttpServletRequest.getPathInfo()        *
  *                      returns the semi-colon as part of the   *
  *                      path info.                              *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  If the inbound request URI contains a semi-colon,
  javax.servlet.http.HttpServletRequest.getPathInfo() will
  return the semi-colon and everything following it as part of
  the path info. This might cause problems when the semi-colon
  is not expected by the application.
  

Problem conclusion

• The WebContainer code was modified to consider a semi-colon as
  a delimiter in an URI. After this fix the semi-colon and
  everything after it will be ignored when calling
  javax.servlet.http.HttpServletRequest.getPathInfo().
  
  
  
  A new WebContainer custom property needs to be set to enable
  this behavior:
  
  Name: com.ibm.ws.webcontainer.useSemiColonAsDelimiterInURI
  
  Values: true / false (default)
  
  
  
  Please refer to the following technote for instructions on
  enabling WebContainer custom properties:
  
  Full profile:
  http://www.ibm.com/support/docview.wss?rss=180&uid=swg21284395
  
  Liberty profile:
  
  http://www-01.ibm.com/support/docview.wss?uid=swg21597753
  
  
  
  The fix for this APAR is currently targeted for inclusion in
  fix packs 8.0.0.11 and 8.5.5.6. Please refer to the
  recommended updates page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE APP S

• Fixed component ID

  5724J0800

Applicable component levels

• R800 PSY

     UP

• R850 PSY

     UP