Hi!

The CrawlerSessionManagerValve sets sessionId from ip address as

  request.setRequestedSessionId(sessionInfo.getSessionId());

I have not checked, but I suspect that the Response.encodeURL(..)
calls in the web application
will still be including the session id into the URLs.

Woudn't it be good to disable url-encoding of session id for such requests?

An easy way to implement that should be to add the following line there:

  request.setRequestedSessionCookie(true);

The drawbacks are
1) it looks hacky and is just used to fool
o.a.catalina.connector.Response#isEncodeable(String).
2) the first response that creates a session is unaffected and will
still include sessionid in the URLs


Best regards,
Konstantin Kolinko

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to