tomcat配置禁止url显示jsessionid
</Context>?
?
<session-config>? ? ?<tracking-mode>COOKIE</tracking-mode>?</session-config> Tomcat 7 supports the above config in your web-app web.xml, which disables URL-based sessions.
?
tomcat7还可以配置来改变jsessionid来保证服务器安全：http://tomyz0223.iteye.com/blog/811237
?
?