-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Martin,

On 10/12/2011 6:01 PM, Martin O'Shea wrote:
> I'm not disagreeing and have set a filter to this end. But it
> doesn't explain why I can see the pages after session
> invalidation.

Your web browser has an on-disk cache. It's reading the files from
there. If you watch your web server logs (or observe what the browser
does using httpfox, fiddler, etc.) you will likely see that there is no
server interaction whatsoever.

The client has no idea that the session has expired and that somehow,
it should expire all the pages in it's cache.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk6WDs8ACgkQ9CaO5/Lv0PA7AACglHXo/DVOTXoXVR1eKbHgboFD
UUoAn0GH6FdBZLSJg24C853+SkzrEs+r
=Q+Ng
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to