tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Bill Barker" <wbar...@wilshire.com>
Subject Re: session id cookies
Date Fri, 04 Jan 2008 03:13:46 GMT

"Paul Singleton" <paul@jbgb.com> wrote in message 
news:477CD9C2.3030007@jbgb.com...
> If I set
>
>    <Context cookies="false" ... >
>
> will Tomcat ignore any JSESSIONID cookie which
> accompanies a request?  Should it?
>

With any of the released versions, it won't ignore the cookie if the browser 
sends one.  There is a patch in the SVN that causes at least TC 6 to ignore 
the cookie, but it seems to be buggy.  More info at 
http://issues.apache.org/bugzilla/show_bug.cgi?id=43839.

As to "should", IMHO the cookies="false" should be more of a hint (like in 
the released versions of Tomcat), but I'm in the minority here.


> Paul Singleton
>
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
> 




---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message