- Make sure the url provided to window.open() is properly encoded by
server so that it includes the sessionId if necessary.

use for that
java.lang.String     encodeURL(java.lang.String url)
from the HttpServletResponse interface server side.

- Check, if cookies are disabled on client, that the sessionId is kept
on all links
- As someone mentioned, check you are not switching from an https to
http url, as sessions are unfortunately differents, browser seeing those
as different services.

Note: we use popups here in an authenticated area, no problem with IE users.


En l'instant précis du 12/10/07 10:09, Adam Lipscombe s'exprimait en ces
termes:
> Folks
>
> I restarted this thread because I inadvertently hijacked another.
>
>
> Peter Crowther said:
>
> "You can't.  This is a client-side problem.  As your first link says:
> Use a key in the querystring, tied to a cookie or a form, if session
> state across windows is a necessity."
>
>
>
> Can you expand on how this works please? If I pass the session ID from
> the calling window to the spawned window, what do I do with it? Look
> up the session cookie with JavaScript? Then what?
> Ideally I want the child window to share the same session.
>
> Sorry if I am being a bit thick here....
>
>
> TIA - Adam
>
>
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


-- 
http://www.devlog.be (a belgian developer's logs)



---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to