tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 50305] New: Provide an option to disable session tracking with URL
Date Fri, 19 Nov 2010 22:03:12 GMT
https://issues.apache.org/bugzilla/show_bug.cgi?id=50305

           Summary: Provide an option to disable session tracking with URL
           Product: Tomcat 7
           Version: 7.0.4
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: Catalina
        AssignedTo: dev@tomcat.apache.org
        ReportedBy: sylvain.laurent@gmail.com


For internal (non-public) applications, where we know that all users browsers
support cookies, there's no need for URL rewriting to track sessions. 

Furthermore having sessionID in the URLs has the following drawback : the first
returned page contains URLs that reference static resources (images, CSS,
JS...) with the session ID, but the following pages contain the same URL
without the sessionID. Thus those resources are downloaded twice instead of
once.

This option should be disabled by default since it is not spec compliant.

Proposition :
<Context disableUrlSessionTracking="true" >

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Mime
View raw message