>> I'm quite certain setting the emptySessionPath switch to false will result >> in the cookie path being the context root of the webapp.
Agreed. And I tried this and it works perfectly in that the cookies set by app A will not prevent app B from using URL encoding (cookies disabled).. BUT... I'm not sure if JBoss is OK to run with emptySessionPath set to true in clustered mode.. See the Jira post: http://jira.jboss.com/jira/browse/JBAS-1400 This seems to suggest that emptySessionPath should be set to true (ie: intentionally override Tomcat default) for JvmRouteValve (which I believe is used when clustering.. which I am). So not sure whether its safe to change this default... View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3915998#3915998 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3915998 ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click _______________________________________________ JBoss-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jboss-user
