Re: Session fixation Tomcat 7

2014-05-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Akash, On 5/8/14, 9:56 PM, Akash Jain wrote: Hi, I am trying to resolve session fixation issue with tomcat 7.0.52 We have a Spring MVC application running on it, and the Auth method is provided by another application which writes cookie,

Re: Session fixation Tomcat 7

2014-05-16 Thread Terence M. Bandoian
On 5/8/2014 8:56 PM, Akash Jain wrote: Hi, I am trying to resolve session fixation issue with tomcat 7.0.52 We have a Spring MVC application running on it, and the Auth method is provided by another application which writes cookie, and we use the cookie value to check whether the user is valid

Session fixation Tomcat 7

2014-05-15 Thread Akash Jain
Hi, I am trying to resolve session fixation issue with tomcat 7.0.52 We have a Spring MVC application running on it, and the Auth method is provided by another application which writes cookie, and we use the cookie value to check whether the user is valid or not. My application URL patterns are