[jboss-jira] [JBoss JIRA] (JBWEB-215) CLONE - More than one JSESSIONID cookie headers set in JBoss Web

Nagai Eiichi (Created) (JIRA) jira-events at lists.jboss.org
Tue Oct 25 02:42:45 EDT 2011


CLONE - More than one JSESSIONID cookie headers set in JBoss Web
----------------------------------------------------------------

                 Key: JBWEB-215
                 URL: https://issues.jboss.org/browse/JBWEB-215
             Project: JBoss Web
          Issue Type: Bug
      Security Level: Public (Everyone can see)
          Components: Tomcat
    Affects Versions: JBossWeb-2.1.11.GA
            Reporter: Nagai Eiichi
            Assignee: Remy Maucherat


More than one JSESSIONID cookie headers set if execute following JSP.
<%
  session.invalidate();
  session = request.getSession();
  session.invalidate();
  session = request.getSession();
%>

This issue has been reported from Bug 49158[1] in tomcat.

[1] Bug 49158 - More than one JSESSIONID cookie headers set 
https://issues.apache.org/bugzilla/show_bug.cgi?id=49158
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/catalina/connector/Request.java?r1=944398&r2=944397&pathrev=944398
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/catalina/connector/Response.java?r1=944398&r2=944397&pathrev=944398

I guess that same fix is required in JBoss Web.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        


More information about the jboss-jira mailing list