pangxianhai opened a new pull request, #594: URL: https://github.com/apache/tomcat/pull/594
we have a problem at function parseSessionCookiesId. If the request has two JSESSIONID on the Cookie. The session will init twice. So request.isRequestedSessionIdValid() will be invoked. But at request.isRequestedSessionIdValid() , it will call manager.findSession(requestedSessionId). This time request is not bind ClassLoader. We customized the manager. On the manager, will used some class at War. So it's will throw a ClassNotFound exception. So I think the session only need init once. Because the second init is the same as the first time. If request.isRequestedSessionIdValid return true,the second is not need. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org