Hi All,
I was tasked with modifying a wicket6/glassfish4 application so that the
session id changes as soon as a user logs in. This is to avoid the problem of
Session Fixation. I used the replaceSession() method (from the wicket Session
class), which does a destroy(); and a bind();. replaceS
Hi,
did you configure Tomcat to not use jsessionid?
http://stackoverflow.com/questions/962729/is-it-possible-to-disable-jsessionid-in-tomcat-servlet
Regards
Sven
On 04.12.2015 17:03, Lois GreeneHernandez wrote:
Hi All,
I was tasked with modifying a wicket6/glassfish4 application so that the
5 12:43 PM
To: users@wicket.apache.org
Subject: Re: jsession id in url
Hi,
did you configure Tomcat to not use jsessionid?
http://stackoverflow.com/questions/962729/is-it-possible-to-disable-jsessionid-in-tomcat-servlet
Regards
Sven
On 04.12.2015 17:03, Lois GreeneHernandez wrote:
> Hi All
PM
> To: users@wicket.apache.org
> Subject: Re: jsession id in url
>
> Hi,
>
> did you configure Tomcat to not use jsessionid?
>
>
> http://stackoverflow.com/questions/962729/is-it-possible-to-disable-jsessionid-in-tomcat-servlet
>
> Regards
> Sven
>
>
Lois
-Original Message-
From: Martin Grigorov [mailto:mgrigo...@apache.org]
Sent: Friday, December 04, 2015 1:11 PM
To: users@wicket.apache.org
Subject: Re: jsession id in url
Hi,
See the Tomcat 7/8 hint at the bottom. GF4 should support that already.
Martin Grigorov
Wicket Trainin
on't have that in our set up.
>
> Please advise.
>
> Thanks in advance for all of your help.
>
> Lois
>
> -Original Message-
> From: Martin Grigorov [mailto:mgrigo...@apache.org]
> Sent: Friday, December 04, 2015 1:11 PM
> To: users@wicket.apache.org
&
