tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Mario Ivankovits <ma...@ops.co.at>
Subject Re: getSession() thread-safe? User A can see user B's account
Date Fri, 21 Jul 2006 14:47:48 GMT
Hi!
> I still don't understand how JSF knows which session you are requesting.
> I'm sorry that I don't know a thing about JSF.
>   
Without going into any details, but JSF simply has a facesServlet which
get the session from the request and puts it in its internal structures.

So it simply takes what it gets from the container.

Ciao,
Mario


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message