You can't create a new SessionID when you have received a SessionID in the
request.
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4101252#4101252
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4101252
__
Thank you for reply.
I could understand it is impossible to create a new SessionID under JBoss.
Are there any recommendation way to prevent Session Fixation Attack under JBoss?
If there are any recommendation way, could you please teach it to me ?
Thank you.
View the original post :
http://