How to disable struts jsessionid in the URL

Question

i need to disable or remove the Jsessionid in the URL how to do that, whether it causes any side effect during ajax request.I am using struts 1.2 version.

score 2 · Answer 1 · edited May 23 '17 at 10:26

2

Servlet 3.0 allows you to specify the means of maintaining a session.

I guess you are not using it, so see this question. I favour the 2nd answer more than the rewrite.

edited May 23 '17 at 10:26

Community

1
1

answered Dec 03 '10 at 15:38

Bozho

572,413
138
1,043
1,132

score 0 · Answer 2 · answered Dec 03 '10 at 15:24

0

If you remove JSESSIONID from your ajax call, your servlet container won't identify your application and the resources stored in the session, (which is a side-effect, depending on your requirement).

E.g. retrieving a list of protected resources (that requires authorization). If the user had logged in (and user info is logged in a session), and Ajax doesn't pass the JSESSIONID, there's no way to verify user who logged in (as there is no application session). So, no protected resources is retrieved.

Just a 2cent thought.

answered Dec 03 '10 at 15:24

Buhake Sindi

85,564
27
164
223

1

If cookies are enabled, the browser will identify the jsessionid via the cookie value. – Steven Benitez Dec 04 '10 at 04:28
@Steven Benites, and on ajax calls? – Buhake Sindi Dec 04 '10 at 07:41
1

@Elite: Cookies are still sent with Ajax requests. – Steven Benitez Dec 05 '10 at 16:54

How to disable struts jsessionid in the URL

2 Answers2