2 Replies Latest reply on Dec 26, 2007 9:53 AM by Ilya Kalujny

    Thoughts about a4j:poll

    Ilya Kalujny Newbie

      Hello there!

      In my application i have to warn user before his session times out, and i`ve been researching the way i could do it with a4j components.

      While i was snooping around i thought that *if* a4j:poll has no inner time-out defined in corresponding bean the session is extended forever. This renders

      <session-config>
      <session-timeout>
      1
      </session-timeout>
      </session-config>

      parameter in web.xml useless, since session would be kept alive forever and this might somehow endanger application security.

      Maybe it would be useful to mention this possible behaviour in a4j:poll description?

      Just a thought really, I`m *not* trying to accuse anyone of anything.