Uploaded image for project: 'JBoss Web'
  1. JBoss Web
  2. JBWEB-249

Session Id is appended as URL path parameter even if disabled

        Details

        • Type: Bug
        • Status: Resolved (View Workflow)
        • Priority: Major
        • Resolution: Done
        • Affects Version/s: None
        • Fix Version/s: None
        • Component/s: None
        • Labels:
          None
        • Environment:

          JBoss AS 7.1.0.Final, Windows 7, Firefox

        • Steps to Reproduce:
          Hide

          1. Make a simple jsf page with links
          2. Clear cookies and click on a link of that page
          3. Session id is appended to URL

          Show
          1. Make a simple jsf page with links 2. Clear cookies and click on a link of that page 3. Session id is appended to URL

          Description

          Even if I use

          <session-config>
          		 
            <tracking-mode>COOKIE</tracking-mode>
          		 
          </session-config>

          The session id is always appended to the url as path parameter at the first request. Related discussion: http://ocpsoft.org/support/rewrite/session-id-is-appended-as-url-path-parameter-in-very-first-request

            Gliffy Diagrams

              Activity

              Ascending order - Click to sort in descending order
              Hide
              Permalink
              rmaucher Remy Maucherat added a comment -

              Ok, so that's correct, but the session id is then not used at all. So it's a good optimization.

              Show
              rmaucher Remy Maucherat added a comment - Ok, so that's correct, but the session id is then not used at all. So it's a good optimization.
              Hide
              Permalink
              christian.beikov Christian Beikov added a comment -

              But still, it is an annoying side effect. Imagine a new user that visits the site. He would see his session id in the url.
              What do you mean by good optimization?

              Show
              christian.beikov Christian Beikov added a comment - But still, it is an annoying side effect. Imagine a new user that visits the site. He would see his session id in the url. What do you mean by good optimization?
              Hide
              Permalink
              jfclere Jean-Frederic Clere added a comment -

              It is fixed by r2106 and that is Servlet 3.0 spec stuff.

              Show
              jfclere Jean-Frederic Clere added a comment - It is fixed by r2106 and that is Servlet 3.0 spec stuff.

                People

                • Assignee:
                  rmaucher Remy Maucherat
                  Reporter:
                  christian.beikov Christian Beikov
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  4 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:

                    Development