Tomcat 5.5 and later adds an equals (=) sign to the cookie. The SPS allows this practice and parses cookie values that contain an equal sign. The default value for the allowequalsincookievalue parameter in the server.conf file is "yes".
Set the allowequalsincookievalue parameter to "no" if you want parsing of the cookie value to terminate when the parser encounters an equal sign.
Copyright © 2011 CA. All rights reserved. | Email CA Technologies about this topic |