pangxianhai opened a new pull request, #594:
URL: https://github.com/apache/tomcat/pull/594

   we have a problem at function parseSessionCookiesId. If the request has two 
JSESSIONID on the Cookie. The session will init twice. So 
request.isRequestedSessionIdValid() will  be invoked. But at 
request.isRequestedSessionIdValid() , it will call 
manager.findSession(requestedSessionId). This time request is not bind 
ClassLoader. We customized the manager. On the manager, will used some class at 
War. So it's will throw a ClassNotFound exception. So I think the session only 
need init once. Because the second init is the same as the first time. If 
request.isRequestedSessionIdValid return true,the second is not need.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to