Looks good - the only thing I'd recommend to add is exception handling when displaying session values. For example - if someone places the following into their session: (A rather simplistic example)

new Object() {
  public String toString() {
      String s = null;
      return s.toString();
  }
  });


-Tim

[EMAIL PROTECTED] wrote:
Author: remm
Date: Mon Apr 16 16:30:03 2007
New Revision: 529442

URL: http://svn.apache.org/viewvc?view=rev&rev=529442
Log:
- Add session browser capabilities in the manager. Let me know if it creates 
problems (I checked XSS to some extent to,
  but please double check if you can).


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to