Luke Taylor d17a2da9e0 SEC-834: Session fixation attack protection will cause problems with URL rewriting ...

http://jira.springframework.org/browse/SEC-834. Changed position of SessionFixationProtectionFilter and modified it to make a decision about whether authentication has taken place prior to calling doFilter(). Previously it did this on the return through the filter chain, which caused the problem described in this issue.

2008-05-15 00:26:27 +00:00

..

main

SEC-834: Session fixation attack protection will cause problems with URL rewriting

2008-05-15 00:26:27 +00:00

site

SEC-562: More changes of Acegi name in comments, docs etc.

2007-10-03 14:02:39 +00:00

test

SEC-834: Session fixation attack protection will cause problems with URL rewriting

2008-05-15 00:26:27 +00:00