|
|
|
In most cases, an application has a specific name that is always used for an associated session cookie. In other cases, the name of the cookie begins with a known string, such as ASPSESSIONID or MYAPPSESSION, and ends with a random or unpredictable suffix. In such cases, the SessionLinker prevents users from presenting more than one of these cookies and enforces the expected session linking.
If the SessionLinker detects multiple potential session cookies, it performs the following steps:
| Copyright © 2012 CA. All rights reserved. |
|