cocoon-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Ulrich Mayring <u...@denic.de>
Subject Re: Auth block: logout doesn't invalidate Sessions
Date Tue, 21 Dec 2004 16:34:35 GMT
Ulrich Mayring wrote:
> Hello,
> 
> after logging out I can still access the previous session by typing in 
> the URL of the form 
> http://foo.com/protected.xml;jsessionid=2C0C8021BCD24D4BEE48E4E4BF642EC9

By chance I stumbled upon the encodeURL transformer and if I use that, 
then the session IS invalidated. Perhaps a bug.

Ulrich


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@cocoon.apache.org
For additional commands, e-mail: users-help@cocoon.apache.org


Mime
View raw message