[ https://issues.apache.org/jira/browse/WW-4730?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Lukasz Lenart updated WW-4730:
------------------------------
    Fix Version/s: 2.5.next

> TokenInterceptor synchronized on session.getId().intern()
> ---------------------------------------------------------
>
>                 Key: WW-4730
>                 URL: https://issues.apache.org/jira/browse/WW-4730
>             Project: Struts 2
>          Issue Type: Bug
>          Components: Core Interceptors
>    Affects Versions: 2.5.x
>            Reporter: Simone Cordaro
>              Labels: interceptors, patch, token
>             Fix For: 2.5.next
>
>         Attachments: TokenInterceptor.java
>
>
> As already done on TokenSessionStoreInterceptor, TokenInterceptor's handleToken method need to be synchronized on "session.getId().intern()" instead of "session"



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)