-
Type: Bug
-
Status: Resolved
-
Priority: Minor
-
Resolution: Fixed
-
Affects Version/s: 7.10
-
Component/s: Core
-
Release Notes Summary:The downloaded file name is sanitized to remove the jsessionid parameter
-
Tags:
-
Backlog priority:200
-
Sprint:nxLD Sprint 10.1.2
-
Story Points:3
On some system or configuration where cookies are not accepted, the jessionid is part of the URLs.
The link to download a file will look like http://localhost:8080/nuxeo/nxfile/default/681a569b-91ea-4b3a-9852-3fc83f3867a6/blobholder:0/myfile-1.3.4.zip;jsessionid=90810978894678364
Then the downloaded file name will be myfile-1.3.4.zip;jsessionid=90810978894678364 instead of myfile-1.3.4.zip
The download servlet should always clean the file name to remove the jsessionid parameter.
- depends on
-
NXP-16398 Review jsessionid management in URL system
- Resolved