JSP single-sign-on portlets limit input parameters

[CR #339222] JSP single-sign-on portlets using the HTTP 302 Redirect command for playback have a limitation on the input parameter names that can be passed to them.

The Universal Window Player (UWP) playback engine generates a number of parameters to pass to portlets to assist with correct, personalized execution. Because the 302 Redirect results in one URL returned to the browser, and all browsers and Web servers have some limit on the maximum length of a URL, the portal trims portlet parameters that are not explicitly part of the portlet definition. It does this by removing all the UWP-defined parameters.

Workaround: Do not send any parameters to a 302 Redirect JSP single-sign-on portlet that matches any of these UWP parameter names:

action

firstInit

refreshInterval

tabset

availableroles

headerlogo

rid

target

b

iframe

role

targetURL

ccl_text

inline

security

tileid

command

login_url

showRefresh

type

content

mvcapp

show_params

uid

currentSID

next_command

showlogo

userid

description

next_mvcapp

sid

xml_window_id

domain

postxmldoc

site_charset_found

xmldoc

filename

raw

taborder

xt