Peter Cooper <[EMAIL PROTECTED]> wrote: >there is a problem with having the first page a *frameset* cos the >browser can request all the frameset very quickly and you get the >frames being in different CSP sessions
AFAICT, the problem with framesets occurs when the frameset document itself is a plain html page, but more than one frame contains a CSP page. In this case, multiple requests for CSP pages may arrive at the server almost simultaneously, resulting in the allocation of multiple sessions. If, however, the frameset document itself is also a CSP page, the CSP session cookie arrives at the browser *before* it can request the separate frame pages, and links to the frames will be rewritten by the CSP engine to contain the session ID. In this situation it should not be possible that multiple sessions be allocated. Gertjan. -- Gertjan Klein
