PI54235: A redirect using an URI relative to the current request URL redi rects to the wrong URL

8.5.5.9: WebSphere Application Server V8.5.5 Fix Pack 9
8.5.5.10: WebSphere Application Server V8.5.5 Fix Pack 10
8.5.5.11: WebSphere Application Server V8.5.5 Fix Pack 11
8.0.0.13: WebSphere Application Server V8.0 Fix Pack 13
8.5.5.12: WebSphere Application Server V8.5.5 Fix Pack 12
8.0.0.14: WebSphere Application Server V8.0 Fix Pack 14
8.5.5.13: WebSphere Application Server V8.5.5 Fix Pack 13
8.0.0.15: WebSphere Application Server V8.0 Fix Pack 15
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14
8.5.5.15: WebSphere Application Server V8.5.5 Fix Pack 15
8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
8.5.5.20: WebSphere Application Server V8.5.5.20
8.5.5.18: WebSphere Application Server V8.5.5 Fix Pack 18
8.5.5.19: WebSphere Application Server V8.5.5 Fix Pack 19
8.5.5.16: WebSphere Application Server V8.5.5 Fix Pack 16
8.5.5.21: WebSphere Application Server V8.5.5.21

APAR status

• Closed as program error.

Error description

• Calling sendRedirect() to a relative URI might redirect to
  the wrong URL if the following conditions are true:
  
  1) the servlet/filter mapping ends exactly with the context
  root
  2) the redirect URI is relative to the current request URL
  
  For example:
  
  -The applications's context root is "/ContextRoot"
  -ServletA is mapped to "/a/ContextRoot"
  -A request to http://example.com/ContextRoot/a/ContextRoot
  is submitted
  -The following method is invoked in the servlet:
  		response.sendRedirect("../resources/index.jsp");
  
  This results in a redirect to
  "http://example.com/ContextRoot/a/resources/index.jsp". The
  expectation is a redirect to
  "http://example.com/ContextRoot/resources/index.jsp". This
  is a regression caused by APAR PI22830.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  IBM WebSphere Application Server Full       *
  *                  Profile versions 8.0 and 8.5.5 and Liberty  *
  *                  Profile version 8.5.5 users of              *
  *                  WebContainer                                *
  ****************************************************************
  * PROBLEM DESCRIPTION: A redirect using a URI relative to the  *
  *                      current request URL redirects to an     *
  *                      incorrect URL                           *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Starting on fixpacks 8.0.0.10 and 8.5.5.4 a call to
  javax.servlet.http.HttpServletResponse.sendRedirect() using a
  relative URI as a parameter might redirect to an incorrect URL
  if the following conditions are true:
  	1) the servlet/filter mapping ends exactly with the context
  root
  	2) the redirect URI is relative to the current request URL
  

Problem conclusion

• The WebContainer was modified to redirect to the correct URL.
  
  The fix for this APAR is currently targeted for inclusion in fix
  packs 8.0.0.13 and 8.5.5.9.  Please refer to the Recommended
  Updates page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WAS LIBERTY COR

• Fixed component ID

  5725L2900

Applicable component levels

• R855 PSY

     UP