You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2010/11/19 23:03:12 UTC

DO NOT REPLY [Bug 50305] New: Provide an option to disable session tracking with URL

https://issues.apache.org/bugzilla/show_bug.cgi?id=50305

           Summary: Provide an option to disable session tracking with URL
           Product: Tomcat 7
           Version: 7.0.4
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: Catalina
        AssignedTo: dev@tomcat.apache.org
        ReportedBy: sylvain.laurent@gmail.com


For internal (non-public) applications, where we know that all users browsers
support cookies, there's no need for URL rewriting to track sessions. 

Furthermore having sessionID in the URLs has the following drawback : the first
returned page contains URLs that reference static resources (images, CSS,
JS...) with the session ID, but the following pages contain the same URL
without the sessionID. Thus those resources are downloaded twice instead of
once.

This option should be disabled by default since it is not spec compliant.

Proposition :
<Context disableUrlSessionTracking="true" >

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 50305] Provide an option to disable session tracking with URL

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=50305

--- Comment #1 from sylvain.laurent@gmail.com 2010-11-19 18:00:12 EST ---
Created an attachment (id=26322)
 --> (https://issues.apache.org/bugzilla/attachment.cgi?id=26322)
Patch for tc7

Proposed patch for tc7.

Note that this feature is not useful for servlet 3 webapps since this can be
configured in web.xml.

I'd like to backport this to tc6.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 50305] Provide an option to disable session tracking with URL

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=50305

sylvain.laurent@gmail.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |DUPLICATE

--- Comment #3 from sylvain.laurent@gmail.com 2010-11-20 14:06:39 EST ---
Sorry I missed that one. So the functionality is in tc6 but not in tc7 ?
weird... 

This means that users have to upgrade to servlet 3 to set the session tracking
mode...

*** This bug has been marked as a duplicate of bug 49811 ***

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 50305] Provide an option to disable session tracking with URL

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=50305

--- Comment #2 from Konstantin Kolinko <kn...@gmail.com> 2010-11-20 13:07:39 EST ---
It is already implemented in TC6. See bug 49811 and
http://svn.apache.org/viewvc?rev=1027196&view=rev

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org