DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=28709>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=28709

javax.servlet.http.HttpServletRequest.isRequestedSessionIdValid() returns true for an 
invalidated session!

           Summary: javax.servlet.http.HttpServletRequest.isRequestedSession
                    IdValid() returns true for an invalidated session!
           Product: Tomcat 5
           Version: 5.0.16
          Platform: Other
        OS/Version: Linux
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: Catalina
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]


This is the of the code sequence executed:

  javax.servlet.http.HttpServletRequestWrapper.getSession(true);
  // here, the debugger shows that the session is valid
  javax.servlet.http.HttpSession.invalidate();
  // here the debugger shows that the session has been invalidated
  javax.servlet.http.HttpServletRequestWrapper.getRequest();
  javax.servlet.http.HttpServletRequest.isRequestedSessionIdValid();
  // this call returns true, which is not expected!

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to