Pages

Remove jsessionid in URL - Struts


URL Rewriting is used to remove the URL jsesssionid in java based web application.By default, Web app URL are look like this :
http://www.bhuvanlabs.com/login.do;jsessionid=539F373633D345

Above URL fails in Security concerns because session is maintain in URL. User can miss use the data by session Id.It's possible that some web sites may use cookies to track user browsing patterns.
Sessions can be implemented with two underlying mechanism
-->cookies
-->URL rewriting

To remove the jsessionid , want to tell in web.xml
<session-config>
    <tracking-mode>COOKIE</tracking-mode>
</session-config>
Now URL look like this..
http://www.bhuvaneslabs.com/login.do