· /lams_build/build_base.xml	(-9, +1)	| History	| Source	| Diff
· /lams_build/conf/deployment-handler/io.undertow.servlet.ServletExtension	(-1, +0)	| History	| Source	| Diff
· /lams_common/src/java/org/lamsfoundation/lams/integration/security/CommonDeploymentHandler.java	(-45, +0)	| History	| Source	| Diff

]]> Sat, 14 Oct 2017 14:51:27 +0200 Marcin Cieslak https://code.lamsfoundation.org/fisheye/changelog/lams-github?cs=999d7eabc9fab6a6831ee3d154dcc9a02ca3dc58 https://code.lamsfoundation.org/fisheye/changelog/lams-github?cs=999d7eabc9fab6a6831ee3d154dcc9a02ca3dc58 Marcin Cieslak committed 999d7ea on branch v4.7, v4.8 in lams-github LDEV-4400, LDEV-3315 Toggle session ID change for each LAMS module

WildFly 10 changes session ID after authentication by default in order

to prevent session fixation attack. It breaks TestHarness, though. In

order to run TH, session ID change needs to be turned off.

Turning it off for Central is not enough as a request to any other

module, like Tool, triggers session ID change. In this case we need to

have session ID change turned on or off in each LAMS module, not just

Central.

· /lams_build/build_base.xml	(-1, +9)	| History	| Source	| Diff
· /lams_build/conf/deployment-handler/io.undertow.servlet.ServletExtension	(-0, +1)	| History	| Source
· /lams_build/conf/host.xml	(-10, +15)	| History	| Source	| Diff
· /lams_common/src/java/org/lamsfoundation/lams/integration/security/CommonDeploymentHandler.java	(-0, +45)	| History	| Source
· /lams_common/src/java/org/lamsfoundation/lams/integration/security/SsoHandler.java	(-2, +2)	| History	| Source	| Diff

]]>