[ http://mc4j.org/jira/browse/STS-462?page=all ]
Tim Fennell resolved STS-462.
-----------------------------
Fix Version/s: Release 1.5
Resolution: Fixed
For a number of reasons we've actually been working on making the crypto code
work so that it doesn't need to create sessions (by using an application wide
key and some other security measures). As such this is now fixed in the trunk
and will be released with 1.5.
> Form submit with parameters creates HttpSession
> -----------------------------------------------
>
> Key: STS-462
> URL: http://mc4j.org/jira/browse/STS-462
> Project: Stripes
> Issue Type: Improvement
> Components: Context Management
> Affects Versions: Release 1.4.3
> Environment: Windows/Linux, tomcat 5.5.28
> Reporter: Phil Sladen
> Assigned To: Tim Fennell
> Priority: Trivial
> Fix For: Release 1.5
>
>
> The trial application that I've been using to evaluate Stripes only creates a
> user session once someone logs in. This way, a heavily used site should be
> able to maintain a smaller memory footprint and the number of sessions equals
> the number of people logged in, convenient. All JSPs have the session="false"
> descriptor which was sufficient with Struts2 to achieve this. But with
> Stripes, as soon as a form is submitted with a parameter, a session is
> created to store the SESSION_ATTR_SECRET_KEY. Is the associated encoding
> overhead and session really necessary/justifiable?
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://mc4j.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
-------------------------------------------------------------------------
SF.Net email is sponsored by:
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services
for just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________
Stripes-development mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/stripes-development
