blocks|key|1321873|text|+<session-config>
+++++<tracking-mode>COOKIE</tracking-mode>
+</session-config>+|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|1321874|Tomcat7和Tomcat8在您的web应用程序web.xml中支持上述配置，这将禁用基于URL的会话。|unstyled|1321875|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$B|C]]|$1|D|3|E|5|F|7|J|8|@]|9|@]|A|$]]|$1|G|3|-4|5|F|7|K|8|@]|9|@]|A|$]]]|H|$]]

<pre><code> &lt;session-config&gt;
 &lt;tracking-mode&gt;COOKIE&lt;/tracking-mode&gt;
 &lt;/session-config&gt; 
</code></pre>

Tomcat 7 and Tomcat 8 support the above config in your web-app web.xml, which disables URL-based sessions.

blocks|key|1537125|text|在Tomcat6.0中可以使用:+disableURLRewriting来完成此操作|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1537126|http://tomcat.apache.org/tomcat-6.0-doc/config/context.html|offset|length|1537127|例如：|1537128|<?xml+version='1.0'+encoding='utf-8'?>
<Context+docBase="PATH_TO_WEBAPP"+path="/CONTEXT"+disableURLRewriting="true">
</Context>|code-block|syntax|javascript|1537129|在Tomcat7.0中，这是通过应用程序中的以下内容进行控制的:+ServletContext.setSessionTrackingModes()|1537130|Tomcat+7.0遵循Servlet+3.0规范。|1537131|entityMap|0|LINK|mutability|MUTABLE|url^0|0|0|1N|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|X|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Y|8|@]|9|@$D|Z|E|10|1|11]]|A|$]]|$1|F|3|G|5|6|7|12|8|@]|9|@]|A|$]]|$1|H|3|I|5|J|7|13|8|@]|9|@]|A|$K|L]]|$1|M|3|N|5|6|7|14|8|@]|9|@]|A|$]]|$1|O|3|P|5|6|7|15|8|@]|9|@]|A|$]]|$1|Q|3|-4|5|6|7|16|8|@]|9|@]|A|$]]]|R|$S|$5|T|U|V|A|$W|C]]]]

It is possible to do this in Tomcat 6.0 with:
disableURLRewriting

<a href="http://tomcat.apache.org/tomcat-6.0-doc/config/context.html">http://tomcat.apache.org/tomcat-6.0-doc/config/context.html</a>

e.g.

<pre><code>&lt;?xml version='1.0' encoding='utf-8'?&gt;
&lt;Context docBase="PATH_TO_WEBAPP" path="/CONTEXT" disableURLRewriting="true"&gt;
&lt;/Context&gt;
</code></pre>

Within Tomcat 7.0, this is controlled with the following within an application:
ServletContext.setSessionTrackingModes()

Tomcat 7.0 follows the Servlet 3.0 specifications.

blocks|key|1321667|text|对所有将response封装在HttpServletResponseWrapper中的URL使用Filter，该URL只返回encodeRedirectUrl、encodeRedirectURL、encodeUrl和encodeURL中未更改的URL。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1321668|entityMap^0|4|8|F|Q|1C|6|1Q|H|28|H|2Q|9|30|9|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]|$9|K|A|L|B|C]|$9|M|A|N|B|C]|$9|O|A|P|B|C]|$9|Q|A|R|B|C]|$9|S|A|T|B|C]|$9|U|A|V|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|W|8|@]|D|@]|E|$]]]|G|$]]

Use a <code>Filter</code> on all URLs that wraps the <code>response</code> in a <code>HttpServletResponseWrapper</code> that simply returns the URL unchanged from <code>encodeRedirectUrl</code>, <code>encodeRedirectURL</code>, <code>encodeUrl</code> and <code>encodeURL</code>.

blocks|key|1321966|text|在Tomcat6.0中，您可以在Tomcat安装的/config路径中使用disableURLRewriting="true“进入context.xml。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1321967|http://tomcat.apache.org/tomcat-6.0-doc/config/context.html|offset|length|1321968|context.xml文件|1321969|<?xml+version='1.0'+encoding='utf-8'?>


<Context+disableURLRewriting="true">

++++
++++<WatchedResource>WEB-INF/web.xml</WatchedResource>

++++
++++

++++
++++

</Context>|code-block|syntax|javascript|1321970|..。|1321971|现在tomcat输出它是搜索引擎友好的。|1321972|尽情享受|1321973|entityMap|0|LINK|mutability|MUTABLE|url^0|0|0|1N|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Z|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|10|8|@]|9|@$D|11|E|12|1|13]]|A|$]]|$1|F|3|G|5|6|7|14|8|@]|9|@]|A|$]]|$1|H|3|I|5|J|7|15|8|@]|9|@]|A|$K|L]]|$1|M|3|N|5|6|7|16|8|@]|9|@]|A|$]]|$1|O|3|P|5|6|7|17|8|@]|9|@]|A|$]]|$1|Q|3|R|5|6|7|18|8|@]|9|@]|A|$]]|$1|S|3|-4|5|6|7|19|8|@]|9|@]|A|$]]]|T|$U|$5|V|W|X|A|$Y|C]]]]

In Tomcat 6.0 you could use disableURLRewriting="true" into context.xml from your /config path of you tomcat instalation.

<a href="http://tomcat.apache.org/tomcat-6.0-doc/config/context.html" rel="nofollow">http://tomcat.apache.org/tomcat-6.0-doc/config/context.html</a>

context.xml file

<pre><code>&lt;?xml version='1.0' encoding='utf-8'?&gt;
&lt;!--
 Licensed to the Apache Software Foundation (ASF) under one or more
 contributor license agreements. See the NOTICE file distributed with
 this work for additional information regarding copyright ownership.
 The ASF licenses this file to You under the Apache License, Version 2.0
 (the "License"); you may not use this file except in compliance with
 the License. You may obtain a copy of the License at

 http://www.apache.org/licenses/LICENSE-2.0

 Unless required by applicable law or agreed to in writing, software
 distributed under the License is distributed on an "AS IS" BASIS,
 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 See the License for the specific language governing permissions and
 limitations under the License.
--&gt;
&lt;!-- The contents of this file will be loaded for each web application --&gt;
&lt;Context disableURLRewriting="true"&gt;

 &lt;!-- Default set of monitored resources --&gt;
 &lt;WatchedResource&gt;WEB-INF/web.xml&lt;/WatchedResource&gt;

 &lt;!-- Uncomment this to disable session persistence across Tomcat restarts --&gt;
 &lt;!--
 &lt;Manager pathname="" /&gt;
 --&gt;

 &lt;!-- Uncomment this to enable Comet connection tacking (provides events
 on session expiration as well as webapp lifecycle) --&gt;
 &lt;!--
 &lt;Valve className="org.apache.catalina.valves.CometConnectionManagerValve" /&gt;
 --&gt;

&lt;/Context&gt;
</code></pre>

...

Now tomcat output it's search engine friendly...

Enjoy

blocks|key|1536948|text|同样，如果你在Tomcat前面有Apache，你可以用一个mod_rewrite过滤器去掉jsession。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1536949|将以下内容添加到apache配置中。|1536950|#Fix+up+tomcat+jsession+appending+rule+issue
RewriteRule++%5E/(.*);jsessionid=(.*)+/$1+[R=301,L]|code-block|syntax|javascript|1536951|这将执行301重定向到没有jsessionid的页面。显然，这将完全禁用url+jsessionid，但这正是我所需要的。|1536952|干杯，马克|1536953|entityMap^0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|P|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|Q|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|R|8|@]|9|@]|A|$]]|$1|K|3|L|5|6|7|S|8|@]|9|@]|A|$]]|$1|M|3|-4|5|6|7|T|8|@]|9|@]|A|$]]]|N|$]]

Also if you have Apache in front of Tomcat you can strip out the jsession with a mod_rewrite filter.

Add the following to your apache config.

<pre><code>#Fix up tomcat jsession appending rule issue
RewriteRule ^/(.*);jsessionid=(.*) /$1 [R=301,L]
</code></pre>

This will do a 301 redirect to a page without the jsessionid. Obviously this will completely disable url jsessionid's but this is what I needed.

Cheers,
Mark

blocks|key|1537036|text|默认情况下，Tomcat服务器中启用了cookie(您可以通过在server.xml的元素中使用cookies=true显式设置它)。启用cookies意味着jsessionID将不会被附加到URL，因为会话将使用cookie进行管理。但是，即使在启用cookies之后，jsessionID也会附加到第一次请求的URL中，因为been服务器在该阶段不知道是否启用了cookies。要删除此类jsessionID，您可以使用tuckey重写规则：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1537037|有关这方面的更多信息，请访问http://javatechworld.blogspot.com/2011/01/how-to-remove-jsessionid-from-url-java.html|offset|length|1537038|<outbound-rule+encodefirst="true">
++++<note>Remove+jsessionid+from+embedded+urls+-+for+urls+WITH+query+parameters</note>
++++<from>%5E/(.*);jsessionid=.*[?](.*)$</from>
++++<to+encode="false">/$1?$2</to>
</outbound-rule>

<outbound-rule+encodefirst="true">
++++<note>Remove+jsessionid+from+embedded+urls+-+for+urls+WITHOUT+query+parameters</note>
++++<from>%5E/(.*);jsessionid=.*[%5E?]$</from>
++++<to+encode="false">/$1</to>
</outbound-rule>|code-block|syntax|javascript|1537039|1537040|entityMap|0|LINK|mutability|MUTABLE|url|http://javatechworld.blogspot.com/2011/01/how-to-remove-jsessionid-from-url-java.html|1^0|0|E|2D|0|0|0|E|2D|1|0^^$0|@$1|2|3|4|5|6|7|U|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|V|8|@]|9|@$D|W|E|X|1|Y]]|A|$]]|$1|F|3|G|5|H|7|Z|8|@]|9|@]|A|$I|J]]|$1|K|3|C|5|6|7|10|8|@]|9|@$D|11|E|12|1|13]]|A|$]]|$1|L|3|-4|5|6|7|14|8|@]|9|@]|A|$]]]|M|$N|$5|O|P|Q|A|$R|S]]|T|$5|O|P|Q|A|$R|S]]]]

By default, cookies are enabled in Tomcat server(you can explicitly set it by using cookies=true in element of server.xml). Enabling cookies means that jsessionID will not be appended to URL's since session will be managed using cookies.
However, even after cookies are enabled, jsessionID's are appended to the URL for first request as the webserver doesn't know at that stage if cookies have been enabled. To remove such jsessionIDs, you can using tuckey rewrite rules:

You can find more information on this at <a href="http://javatechworld.blogspot.com/2011/01/how-to-remove-jsessionid-from-url-java.html" rel="nofollow">http://javatechworld.blogspot.com/2011/01/how-to-remove-jsessionid-from-url-java.html</a>

<pre><code>&lt;outbound-rule encodefirst="true"&gt;
 &lt;note&gt;Remove jsessionid from embedded urls - for urls WITH query parameters&lt;/note&gt;
 &lt;from&gt;^/(.*);jsessionid=.*[?](.*)$&lt;/from&gt;
 &lt;to encode="false"&gt;/$1?$2&lt;/to&gt;
&lt;/outbound-rule&gt;

&lt;outbound-rule encodefirst="true"&gt;
 &lt;note&gt;Remove jsessionid from embedded urls - for urls WITHOUT query parameters&lt;/note&gt;
 &lt;from&gt;^/(.*);jsessionid=.*[^?]$&lt;/from&gt;
 &lt;to encode="false"&gt;/$1&lt;/to&gt;
&lt;/outbound-rule&gt;
</code></pre>

You can find more information on this at <a href="http://javatechworld.blogspot.com/2011/01/how-to-remove-jsessionid-from-url-java.html" rel="nofollow">http://javatechworld.blogspot.com/2011/01/how-to-remove-jsessionid-from-url-java.html</a>

Is it possible to turnoff jsessionid in the url in tomcat? the jsessionid seems not too search engine friendly.

Is it possible to disable jsessionid in tomcat servlet?

在tomcat中关闭url中的jsessionid是可能的吗？jsessionid似乎对搜索引擎不太友好。

问可以在tomcat servlet中禁用jsessionid吗？
EN

回答 6

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问可以在tomcat servlet中禁用jsessionid吗？EN

回答 6

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问可以在tomcat servlet中禁用jsessionid吗？
EN