If all you want to do is remove the jsessionid from the URL there is a wiki entry on how to do this. It is under SEO optimization. This will force a new session on every
Sent from my iPhone On Feb 22, 2012, at 8:00 AM, geissb...@gmx.org wrote: > Hi folks, > > I'm struggling with the documentation of ExternalLink (applies for both 1.4 > and 1.5): > http://wicket.apache.org/apidocs/1.4/org/apache/wicket/markup/html/link/ExternalLink.html > > I.e. especially with this paragraph: > > "Note: in the case when the support for cookies in the browser is disabled > the user's jsessionid will leak in the 'Referrer' header after clicking this > link. If this is a problem for the application then better use a Link which > redirects to a shared resource (see WebApplication#mountResource(String, > org.apache.wicket.request.resource.ResourceReference) , e.g. > "/myapp/redirecting-resource?url=...") which on its side redirects to the new > URL using RedirectToUrlException. Another option is to use rel="noreferrer" > attribute in your markup but this will work only in the modern browsers > (supporting HTML5 standard)." > > For several internal reasons which can't be discussed here, the jsessionid > has to be contained in the URL and I want to achieve exactly what is > described in the documentation: have a somewhat generic referrer which > doesn't contain the jsessionid. But honestly, I am totally confused by the > description. How could I mount something which is able to throw a > RedirectToUrlException, i.e. something backed by Java logic, as a resource? > As far as I understand the concept of shared resources they are always things > like images, CSS, etc., but not pages or something similar. > > Both creating a link to a shared a resource and throwing a > RedirectToUrlException in the request cycle are fine by themselves, but I > just can't see how to connect these two steps. Thus, I would be very pleased > if someone could give me a hint on how to manage this. > > Thanks! :-) > > Cheers, > > Michael > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org > For additional commands, e-mail: users-h...@wicket.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
