Validate elytron session-timeout maximum-session-cache-size on negative values ------------------------------------------------------------------------------ Key: WFLY-7592 URL: https://issues.jboss.org/browse/WFLY-7592 Project: WildFly Issue Type: Bug Components: Security Affects Versions: 11.0.0.Alpha1 Reporter: Martin Choma Valid values for attributes session-timeout and maximum-session-cache-size are zero and positive values. However elytron subsystem allows to input negative values as well. It works because elytron introduced "safety net" by converting negative values to 0. [1] https://github.com/wildfly-security/wildfly-elytron/pull/505