bad jsessionid in form action on login page ------------------------------------------- Key: JBPORTAL-940 URL: http://jira.jboss.com/jira/browse/JBPORTAL-940 Project: JBoss Portal Issue Type: Bug Security Level: Public(Everyone can see) Components: Portal Server Affects Versions: 2.2.1 Final, 2.4 Final Environment: jboss-portal 2.2.1-SP2 out-of-the-box jboss-portal 2.4-RC1 out-of-the-box Reporter: Rafal Krupinski Assigned To: Julien Viet Fix For: 2.4 Final, 2.2.1 Final when i open any page on out-of-the-box portal there is jsessionid in urls. It's ok until I open the login page, where it looks like this form method="POST" action="j_security_check;jsessionid=...%>" name=... etc. the problem is in portal-server.war/login.jsp line 22 there is double '%>'