luehe       2003/09/16 11:56:35

  Modified:    catalina/src/share/org/apache/catalina/core
                        ApplicationHttpRequest.java
  Log:
  Fixed Bugtraq 4923455 ("Sessions created in the target webapp of a cross-context are 
invalid")
  
  Revision  Changes    Path
  1.13      +5 -4      
jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/core/ApplicationHttpRequest.java
  
  Index: ApplicationHttpRequest.java
  ===================================================================
  RCS file: 
/home/cvs/jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/core/ApplicationHttpRequest.java,v
  retrieving revision 1.12
  retrieving revision 1.13
  diff -u -r1.12 -r1.13
  --- ApplicationHttpRequest.java       31 Aug 2003 21:08:55 -0000      1.12
  +++ ApplicationHttpRequest.java       16 Sep 2003 18:56:35 -0000      1.13
  @@ -545,6 +545,7 @@
                   if (localSession == null) {
                       localSession = context.getManager().createEmptySession();
                       localSession.setId(other.getId());
  +                    localSession.setValid(true);
                   }
                   session = localSession.getSession();
                   return session;
  
  
  

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to