Hide Session IDs

In some cases, users may see a session ID parameter (jsessionid) in the address bar of their browser.

For security reasons, you are recommended to ensure that your Tomcat instance is configured to use cookies to store user sessions:

1. Open the main Tomcat web.xml configuration file in a text editor (<tomcat_home>\conf\web.xml).

2. Locate the <session-config> section, which will be similar to the following:

   XML

   <session-config>
     <session-timeout>30</session-timeout>
   </session-config>

3. Add <tracking-mode>COOKIE</tracking-mode> to this section:

   XML

   <session-config>
     <session-timeout>30</session-timeout>
     <tracking-mode>COOKIE</tracking-mode>
   </session-config>

4. Save your changes and restart Tomcat or the SuperWEB2 service.