JBoss Web
  1. JBoss Web
  2. JBWEB-249

Session Id is appended as URL path parameter even if disabled

    Details

    • Type: Bug Bug
    • Status: Resolved (View Workflow)
    • Priority: Major Major
    • Resolution: Done
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: None
    • Labels:
      None
    • Environment:
      JBoss AS 7.1.0.Final, Windows 7, Firefox
    • Steps to Reproduce:
      Hide

      1. Make a simple jsf page with links
      2. Clear cookies and click on a link of that page
      3. Session id is appended to URL

      Show
      1. Make a simple jsf page with links 2. Clear cookies and click on a link of that page 3. Session id is appended to URL
    • Similar Issues:
      Show 8 results 

      Description

      Even if I use

      <session-config>
        <tracking-mode>COOKIE</tracking-mode>
      </session-config>
      

      The session id is always appended to the url as path parameter at the first request. Related discussion: http://ocpsoft.org/support/rewrite/session-id-is-appended-as-url-path-parameter-in-very-first-request

        Gliffy Diagrams

          Activity

          Hide
          Remy Maucherat added a comment -

          Ok, so that's correct, but the session id is then not used at all. So it's a good optimization.

          Show
          Remy Maucherat added a comment - Ok, so that's correct, but the session id is then not used at all. So it's a good optimization.
          Hide
          Christian Beikov added a comment -

          But still, it is an annoying side effect. Imagine a new user that visits the site. He would see his session id in the url.
          What do you mean by good optimization?

          Show
          Christian Beikov added a comment - But still, it is an annoying side effect. Imagine a new user that visits the site. He would see his session id in the url. What do you mean by good optimization?
          Hide
          Jean-Frederic Clere added a comment -

          It is fixed by r2106 and that is Servlet 3.0 spec stuff.

          Show
          Jean-Frederic Clere added a comment - It is fixed by r2106 and that is Servlet 3.0 spec stuff.

            People

            • Assignee:
              Remy Maucherat
              Reporter:
              Christian Beikov
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development