Re: Identifier JSESSIONID exposed on all my struts menu webapps

brycenesbitt <bryce1-b4dvK1Jd0NvqlBn2x/[email protected]> Mon, 9 Apr 2007 14:36:45 -0700 (PDT)
Newsgroups gmane.comp.java.struts-menu.user
Message-ID <[email protected]>
Some struts sites don't require a login.  Those sites, or those parts of
those sites, are far
better off with URL Rewriting off, avoiding the snakepits that
;jsessionid=XXX creates.


mraible wrote:
> 
> I'm going to to leave URL Rewriting on in Struts Menu because it
> allows menu links to work when cookies are turned off. This is based
> on users requests.
> 
> http://issues.appfuse.org/browse/APF-405
> 
> I suppose I could make it configurable if there's enough demand.
> However, I do think that sites should still work if cookies are turned
> off - don't you?
> 
> Matt
> 

-- 
View this message in context: http://www.nabble.com/Identifier-JSESSIONID-exposed-on-all-my-struts-menu-webapps-tf3414711.html#a9910034
Sent from the struts-menu-user mailing list archive at Nabble.com.


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV