Re: [jetty-users] Is there any CSRF protection/filters in jetty ?

[Jan Bartel <janb@xxxxxxxxxxx>]

Amaltas,

See https://bugs.eclipse.org/bugs/show_bug.cgi?id=370385.

In the meanwhile, you can disable putting session ids in links by
calling SessionManager.setSessionIdPathParameterName(null);

Or alternatively, invalidate and recreate a new session, copying
across attributes in a filter/servlet/jsp etc.

regards
Jan

On 2 February 2012 10:17, Amaltas <amaltas@xxxxxxxxxxx> wrote:
>
>
> _______________________________________________
> jetty-users mailing list
> jetty-users@xxxxxxxxxxx
> https://dev.eclipse.org/mailman/listinfo/jetty-users
>