[ 
https://issues.apache.org/jira/browse/WICKET-6512?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16303508#comment-16303508
 ] 

ASF GitHub Bot commented on WICKET-6512:
----------------------------------------

GitHub user solomax opened a pull request:

    https://github.com/apache/wicket/pull/252

    [WICKET-6512] feedbackMessages, style, pageId, sequence and temporary…

    …SessionAttributes are not being dropped while session replacement

You can merge this pull request into a Git repository by running:

    $ git pull https://github.com/apache/wicket WICKET-6512-replaceSession

Alternatively you can review and apply these changes as the patch at:

    https://github.com/apache/wicket/pull/252.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

    This closes #252
    
----
commit 05a8c7e57d6a2822d09fa1806955707c4cca368e
Author: Maxim Solodovnik <solomax666@...>
Date:   2017-12-26T06:10:33Z

    [WICKET-6512] feedbackMessages, style, pageId, sequence and 
temporarySessionAttributes are not being dropped while session replacement

----


> pageId is being reset during Session::replaceSession() call
> -----------------------------------------------------------
>
>                 Key: WICKET-6512
>                 URL: https://issues.apache.org/jira/browse/WICKET-6512
>             Project: Wicket
>          Issue Type: Bug
>          Components: wicket
>    Affects Versions: 8.0.0-M8
>            Reporter: Maxim Solodovnik
>            Assignee: Maxim Solodovnik
>
> I'm using replaceSession(); method to prevent session fuxation
> 2 pages are being created with same pageId, in case 
> Session.get().replaceSession(); method is being called to prevent session 
> fixation
> Du to pageId is being set to 0 during session replacement process
> discussion thread: http://markmail.org/message/vve2o4wrytonm7w5



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to