https://issues.apache.org/bugzilla/show_bug.cgi?id=55278

--- Comment #3 from Mikhail T. <[email protected]> ---
Even more, perhaps... Even if there was a session-cookie already in the
browser, if the server-side processing (CGI, script, whatever) did not attempt
to modify the session, then there should not be an attempt to reset the cookie.

Absence of the session-overwriting header should not be treated the same as
presence of an empty header, in my humble opinion.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to