This content has been marked as final.
Show 2 replies
-
1. Re: Is it possible to create a new Session ID using session.
jfclere Nov 2, 2007 7:26 AM (in response to jbosstak)You can't create a new SessionID when you have received a SessionID in the request.
-
2. Re: Is it possible to create a new Session ID using session.
jbosstak Nov 4, 2007 9:18 PM (in response to jbosstak)Thank you for reply.
I could understand it is impossible to create a new SessionID under JBoss.
Are there any recommendation way to prevent Session Fixation Attack under JBoss?
If there are any recommendation way, could you please teach it to me ?
Thank you.