https://issues.apache.org/bugzilla/show_bug.cgi?id=49811
--- Comment #7 from Wesley <wesley.ache...@gmail.com> 2010-08-30 06:30:03 EDT --- (In reply to comment #6) > > You should probably also change the URL-parsing code that accepts jsessionid > > parameters and have it ignore URL-supplied jsessionids, > The proposed changes look sufficient to me. Actually there is an error in the existing patch where at the point where the details are read out of the context the context hasn't been attached to the request yet. Basically the null check that I did is always entered currently and the parsing always defaults to reading the sessionID. I'm working on a new patch once I figure out a reliable way to retrieve the context at this point. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org