[jira] [Commented] (WW-4190) Struts Tag Form & URL explicit excludeSession attribute

["Jose L Martinez-Avial (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/WW-4190?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13759597#comment-13759597 ] 

Jose L Martinez-Avial commented on WW-4190:
-------------------------------------------

The management of the cookie JSESSIONID/session is done by the container, Struts does not take any part in that (apart from creating the sesion by calling HTTPRequest.getSession(true)). Usually (unless the browser does not allow cookies, and I don't think you can control that) the JSESSIONID is managed a cookie, so there is no control of the session in the URL. And once the session is created, and the JSESSIONID sent to the browser, it is sent back to the server in all request until the servers removes the cookie (when the session is destroyed). So I don't think you can do something like that, unless you don't have a session (you only create it when you needed it) or you just destroy the session.

                
> Struts Tag Form & URL explicit excludeSession attribute
> -------------------------------------------------------
>
>                 Key: WW-4190
>                 URL: https://issues.apache.org/jira/browse/WW-4190
>             Project: Struts 2
>          Issue Type: Improvement
>          Components: Plugin - Tags
>    Affects Versions: 2.3.4.1
>         Environment: N/A
>            Reporter: John Patrick
>            Priority: Minor
>
> Can an addition attribute be added to both the :form and :url tags to explicitly include or exclude the session details. Leave default behavior as before, but if excludeSession="true" then JSESSIONID or what ever session variable name is used, then explicitly don't put the session details on the URL generated.
> I've worked on a few projects that have had to process the URL before using as we have needed to explicitly not include the session details.
> I'll start thinking about patch etc, but someone up to speed with struts it might only be a 5 or 15 min job for them.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira