[#CAS-702] Latest versions of Tomcat 5.5 & 6 break the CAS3.3 demo server

CAS Server

Latest versions of Tomcat 5.5 & 6 break the CAS3.3 demo server

Created: 10/Sep/08 08:29 PM Updated: 23/Nov/08 05:29 AM

Component/s:

None

Affects Version/s:

3.3

Fix Version/s:

3.3.1

Original Estimate:	1 day	Remaining Estimate:	1 day	Time Spent:	Unknown
Environment:	Tomcat 6.0.18 and 5.5.27

Description

« Hide

The demo cas app, accessed at this URL:

http://localhost:8080/cas-server-webapp-3.3/login

gives the following error:

org.apache.jasper.JasperException: /WEB-INF/view/jsp/default/ui/casLoginView.jsp(48,35) Attribute value request.getQueryString() == null ? "" : request.getQueryString().replaceAll("&locale=([A-Za-z][A-Za-z]_)?[A-Za-z][A-Za-z]|^locale=([A-Za-z][A-Za-z]_)?[A-Za-z][A-Za-z]", "") is quoted with " which must be escaped when used within the value

Per Scott Battaglia:

Apparently Tomcat changed the way they handle quotation marks
in JSP pages to use strict checking:

https://issues.apache.org/bugzilla/show_bug.cgi?id=45015

As a temporary fix you can set the JAVA_OPTS to something like this:
export
JAVA_OPTS="-Dorg.apache.jasper.compiler.Parser.STRICT_QUOTE_ESCAPING=false"
and then restart Tomcat

All

Comments

Work Log

Change History

Sort Order:

[ Permlink | « Hide ]

Kim Cary [10/Sep/08 08:42 PM]

Error in title:
Latest versions of Tomcat 5.5 & 6 bread the CAS3.3 demo server
Should read:
Latest versions of Tomcat 5.5 & 6 break the CAS3.3 demo server

This bug is going to be fixed, not fried or put in a sandwich.

[ Permlink | « Hide ]

Vangel Ajanovski [18/Sep/08 12:12 PM]

Another pretty simple fix is to change the outside " in line 48, into '

[ Permlink | « Hide ]

Scott Battaglia [18/Sep/08 12:19 PM]

That's probably what we'll do.... but for older stuff we can just tell people to disable that check

[ Permlink | « Hide ]

Kim Cary [23/Sep/08 02:01 PM]

The link for the nightly builds is broken (404). How do I get a copy
of 3.3.1? There were a couple fixed bugs there...

[ Permlink | « Hide ]

Kim Cary [23/Sep/08 02:01 PM]

Meant to send the below to the list, not you directly. Apologies!

The link for the nightly builds is broken (404). How do I get a copy
of 3.3.1? There were a couple fixed bugs there...

[ Permlink | « Hide ]

Mostafa Gamil [23/Nov/08 05:29 AM]

As a temporary fix you can set the JAVA_OPTS in the catalina.sh file of tomcat to something like this:
export JAVA_OPTS="-Dorg.apache.jasper.compiler.Parser.STRICT_QUOTE_ESCAPING=false"
and then restart Tomcat
------------------------------
www.gpmehosting.com