[EMAIL PROTECTED] wrote:
Author: mturk
Date: Tue Jun 26 05:28:00 2007
New Revision: 550789
URL: http://svn.apache.org/viewvc?view=rev&rev=550789
Log:
Do not pass session id if it is zero length. For now only log those attempts.
We should consider returning 400 if the jsessionid is empty perhaps.
This serves no useful purpose. What if jsessionid is one char long
(let's say ' ') ? Is it more valid ?
Rémy
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
