How to avoid JSESSIONID display browser querystring

[ponvin krishna]

Hi,

I have two JBoss servers clusted using ModJK and the application I have developed using struts framework. I am accessing the application from Apache web server.

When I access the application home page on the borwser address bar I am seeing the JSESSIONID as

http://HostName/AppContext/home.do;jsessionid=56FA082595546D3F49A5F42ACB48A1EB.JbossCluster1

How can I restrict ";jsessionid=56FA082595546D3F49A5F42ACB48A1EB.JbossCluster1" being displayed in browser as part of Query String.

Please someone help me.

Regards
Pon

[Esteban Puertas]

Hi,
Is your browser allowing cookies? It seems like the server is using url rewriting...

[Rajesh Chande]

Hello,

Any body got any solution on this issue?

I am facing the same issue.

Regards,
Rajesh.

[Rene Larsen]

Cut-and-paste from http://www.mail-archive.com/[e-mail]/msg50246.html

The "jsessionid" attribute is put when cookies are not enabled on the browser, or when there wasn't time to set one. For example if your home JSP page has a <html:link>, the Struts tag will rewrite the URL appending the "jsessionid" attribute, because it did not find any cookie.

[Kyle Bradley]

I see this is old, but a google search brought me here so I'm adding an answer...


The Servlet 3.0 standard gives you two ways to disable URL session rewriting. This works in Tomcat 7, Glassfish v3, and any other Servlet 3.0-compliant servlet container. First, you can add this to your web.xml webapp config:

<session-config>
     <tracking-mode>COOKIE</tracking-mode>
</session-config>

Or programmatically, you can use:

servletContext.setSessionTrackingModes(EnumSet.of(SessionTrackingMode.COOKIE));

Found from this url: https://fralef.me/tomcat-disable-jsessionid-in-url.html
OR this url: http://stackoverflow.com/questions/962729/is-it-possible-to-disable-jsessionid-in-tomcat-servlet