You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@wicket.apache.org by "Maxim Solodovnik (JIRA)" <ji...@apache.org> on 2017/12/26 06:09:00 UTC

[jira] [Created] (WICKET-6512) pageId is being reset during Session::replaceSession() call

Maxim Solodovnik created WICKET-6512:
----------------------------------------

             Summary: pageId is being reset during Session::replaceSession() call
                 Key: WICKET-6512
                 URL: https://issues.apache.org/jira/browse/WICKET-6512
             Project: Wicket
          Issue Type: Bug
          Components: wicket
    Affects Versions: 8.0.0-M8
            Reporter: Maxim Solodovnik
            Assignee: Maxim Solodovnik


I'm using replaceSession(); method to prevent session fuxation

2 pages are being created with same pageId, in case Session.get().replaceSession(); method is being called to prevent session fixation

Du to pageId is being set to 0 during session replacement process

discussion thread: http://markmail.org/message/vve2o4wrytonm7w5



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)