View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0001222 | savapage-server | [All Projects] General | public | 2022-07-29 17:21 | 2022-07-29 17:27 |
| Reporter | rijkr | Assigned To | rijkr | ||
| Priority | normal | Severity | major | Reproducibility | always |
| Status | resolved | Resolution | fixed | ||
| Product Version | 1.3.0 | ||||
| Target Version | 1.4.0 | Fixed in Version | 1.4.0 | ||
| Summary | 0001222: Optimize HTTP session management | ||||
| Description | IST-1: An HTTP session is persisted on disk by Wicket if any component of an accessed Page is stateful. This creates a lot of useless session files for unsolicited requests outside the web browser (crawlers). IST-2: HTTP sessions remain active for web crawler requests. SOLL-1: Make Wicket AjaxButton instances stateless so HTTP sessions are not persisted on disk. SOLL-2: Invalidate sessions of unauthenticated pages as precaution against web crawlers. Crawlers "hit and run" outside a web browser and don't trigger Javascript events (after DOM is fully loaded) that result in rightly scoped http sessions. Note: a web crawler can be simulated with `wget` of SavaPage Web App. | ||||
| Tags | No tags attached. | ||||
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2022-07-29 17:21 | rijkr | New Issue | |
| 2022-07-29 17:21 | rijkr | Status | new => assigned |
| 2022-07-29 17:21 | rijkr | Assigned To | => rijkr |
| 2022-07-29 17:27 | rijkr | Status | assigned => resolved |
| 2022-07-29 17:27 | rijkr | Resolution | open => fixed |
| 2022-07-29 17:27 | rijkr | Fixed in Version | => 1.4.0 |
