[jbossseam-issues] [JBoss JIRA] Commented: (JBSEAM-2105) pluggable conversation id strategy

Marcus Adair (JIRA) jira-events at lists.jboss.org
Tue Oct 16 15:22:03 EDT 2007


    [ http://jira.jboss.com/jira/browse/JBSEAM-2105?page=comments#action_12382861 ] 
            
Marcus Adair commented on JBSEAM-2105:
--------------------------------------

Is there any chance that instead of incrementing conversation Ids globally they are incremented per session?

This solves (1) security problem of showing volume of generated conversation Ids to the public and (2) keeps conversation Ids small with low level of extra URI parameter cruft.

I'm all about making it possible to override the generator as well, since people will have other considerations, but if there aren't some corner cases that I'm missing then this is probably the override I'd prefer anyway and perhaps it would be a good default for a lot of people.

> pluggable conversation id strategy
> ----------------------------------
>
>                 Key: JBSEAM-2105
>                 URL: http://jira.jboss.com/jira/browse/JBSEAM-2105
>             Project: JBoss Seam
>          Issue Type: Feature Request
>            Reporter: Norman Richards
>             Fix For: 2.0.1.GA
>
>         Attachments: patch_file
>
>
> Conversation id generation should be managed by a component that can be overridden for specific deployments.  We might even consider providing a more interesting default (or optional) strategy like a GUID.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        



More information about the seam-issues mailing list