[Coldbox 4] Session Fixation

[Chad Baloga]

Does ColdBox have any built in solutions for session fixation besides using the CF session rotation functions?

[Brad Wood]

Not that I'm aware. Is there something you'd like to see implemented?

Happy Connecting. Sent from my Sprint Samsung Galaxy S® 5

--
--
You received this message because you are subscribed to the Google Groups "ColdBox Platform" group.
For News, visit http://blog.coldbox.org
For Documentation, visit http://wiki.coldbox.org
For Bug Reports, visit https://ortussolutions.atlassian.net/browse/COLDBOX
---
You received this message because you are subscribed to the Google Groups "ColdBox Platform" group.
To unsubscribe from this group and stop receiving emails from it, send an email to coldbox+u...@googlegroups.com.
To post to this group, send email to col...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/coldbox/a6e5844e-be37-4951-a0be-fc6777560fad%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Chad Baloga]

I was just wondering before I bring over code I had used in our legacy system for session rotation.  This is to meet a STIG requirement for our system.  If you are not using J2EE sessions then you can just use the SessionRotate function built into CF10/CF11 (https://wikidocs.adobe.com/wiki/display/coldfusionen/SessionRotate).  For J2EE I use the following solution:  http://www.petefreitag.com/item/829.cfm

Thanks,

Chad

You received this message because you are subscribed to a topic in the Google Groups "ColdBox Platform" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/coldbox/YZEwvw8YH4A/unsubscribe.
To unsubscribe from this group and all its topics, send an email to coldbox+u...@googlegroups.com.

To post to this group, send email to col...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/coldbox/gou4s6wpr6pgg32b2rvsk4ej.1437359134729%40email.android.com.