Skip to content

java.lang.IllegalArgumentException: UT000173: An invalid control character [239] was present in the cookie value or attribute #8

@dyrnq

Description

@dyrnq
java.lang.IllegalArgumentException: UT000173: An invalid control character [239] was present in the cookie value or attribute
	at io.undertow.util.LegacyCookieSupport.isHttpSeparator(LegacyCookieSupport.java:149) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.util.Cookies.parseCookie(Cookies.java:304) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.util.Cookies.parseRequestCookies(Cookies.java:246) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.util.Cookies.parseRequestCookies(Cookies.java:224) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.util.Cookies.parseRequestCookies(Cookies.java:215) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.server.HttpServerExchange.requestCookies(HttpServerExchange.java:1207) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.server.HttpServerExchange.getRequestCookie(HttpServerExchange.java:1188) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.server.session.SessionCookieConfig.findSessionId(SessionCookieConfig.java:83) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.spec.SessionCookieConfigImpl.findSessionId(SessionCookieConfigImpl.java:76) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.spec.ServletContextImpl$ServletContextSessionConfig.findSessionId(ServletContextImpl.java:1277) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.server.session.InMemorySessionManager.getSession(InMemorySessionManager.java:240) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.spec.ServletContextImpl.getSession(ServletContextImpl.java:884) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.spec.ServletContextImpl.getSession(ServletContextImpl.java:990) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:69) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.handlers.SendErrorPageHandler.handleRequest(SendErrorPageHandler.java:52) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:276) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:132) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:256) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:101) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.server.Connectors.executeRootHandler(Connectors.java:395) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:859) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at org.jboss.threads.ContextHandler$1.runWith(ContextHandler.java:18) ~[jboss-threads-3.5.0.Final.jar!/:3.5.0.Final]
	at org.jboss.threads.EnhancedQueueExecutor$Task.run(EnhancedQueueExecutor.java:2513) ~[jboss-threads-3.5.0.Final.jar!/:3.5.0.Final]
	at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1538) ~[jboss-threads-3.5.0.Final.jar!/:3.5.0.Final]
	at org.xnio.XnioWorker$WorkerThreadFactory$1$1.run(XnioWorker.java:1282) ~[xnio-api-3.8.16.Final.jar!/:3.8.16.Final]
	at java.base/java.lang.Thread.run(Unknown Source) ~[na:na]

2024-09-28T13:56:35.880Z ERROR 1 --- [  XNIO-1 task-4] io.undertow.request                      : UT005023: Exception handling request to /cookies/set/key/key

java.lang.IllegalArgumentException: UT000173: An invalid control character [239] was present in the cookie value or attribute
	at io.undertow.util.LegacyCookieSupport.isHttpSeparator(LegacyCookieSupport.java:149) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.util.Cookies.parseCookie(Cookies.java:304) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.util.Cookies.parseRequestCookies(Cookies.java:246) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.util.Cookies.parseRequestCookies(Cookies.java:224) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.util.Cookies.parseRequestCookies(Cookies.java:215) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.server.HttpServerExchange.requestCookies(HttpServerExchange.java:1207) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.server.HttpServerExchange.getRequestCookie(HttpServerExchange.java:1188) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.server.session.SessionCookieConfig.findSessionId(SessionCookieConfig.java:83) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.spec.SessionCookieConfigImpl.findSessionId(SessionCookieConfigImpl.java:76) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.spec.ServletContextImpl$ServletContextSessionConfig.findSessionId(ServletContextImpl.java:1277) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.server.session.InMemorySessionManager.getSession(InMemorySessionManager.java:240) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.spec.ServletContextImpl.getSession(ServletContextImpl.java:884) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.spec.ServletContextImpl.getSession(ServletContextImpl.java:990) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:69) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.handlers.SendErrorPageHandler.handleRequest(SendErrorPageHandler.java:52) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:276) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:132) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:256) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:101) ~[undertow-servlet-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.server.Connectors.executeRootHandler(Connectors.java:395) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:859) ~[undertow-core-2.3.17.Final.jar!/:2.3.17.Final]
	at org.jboss.threads.ContextHandler$1.runWith(ContextHandler.java:18) ~[jboss-threads-3.5.0.Final.jar!/:3.5.0.Final]
	at org.jboss.threads.EnhancedQueueExecutor$Task.run(EnhancedQueueExecutor.java:2513) ~[jboss-threads-3.5.0.Final.jar!/:3.5.0.Final]
	at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1538) ~[jboss-threads-3.5.0.Final.jar!/:3.5.0.Final]
	at org.xnio.XnioWorker$WorkerThreadFactory$1$1.run(XnioWorker.java:1282) ~[xnio-api-3.8.16.Final.jar!/:3.8.16.Final]
	at java.base/java.lang.Thread.run(Unknown Source) ~[na:na]

xref renaesop/blog#4

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions