开发者

How to disable struts jsessionid in the URL

i need to disable or remove the Jsessionid in the URL how to do that, whether i开发者_StackOverflow社区t causes any side effect during ajax request.I am using struts 1.2 version.


Servlet 3.0 allows you to specify the means of maintaining a session.

I guess you are not using it, so see this question. I favour the 2nd answer more than the rewrite.


If you remove JSESSIONID from your ajax call, your servlet container won't identify your application and the resources stored in the session, (which is a side-effect, depending on your requirement).

E.g. retrieving a list of protected resources (that requires authorization). If the user had logged in (and user info is logged in a session), and Ajax doesn't pass the JSESSIONID, there's no way to verify user who logged in (as there is no application session). So, no protected resources is retrieved.

Just a 2cent thought.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜