Re: emptySessionPath=

2007-06-04 Thread David Jencks
On Jun 4, 2007, at 8:43 AM, Joerg Heinicke wrote: Hi, I have a portal application and introduced recently emptySessionPath="true" to have access to the same objects in the session in my servlets and my portlets, both sitting in the same webapp. First observation I made is the repeated us

Re: emptySessionPath=

2007-06-04 Thread Remy Maucherat
Joerg Heinicke wrote: First observation I made is the repeated use of the same session id despite invalidating the corresponding session. I found out that this is by intention [1], but it leaves a strange gut feeling. Why is a session id an arbitrary string, which is under normal circumstances re