-
Bug
-
Resolution: Done
-
Minor
-
jbossws-1.2.1
-
None
-
Low
ServletEndpointContextImpl implements getHttpSession as simply request.getSession() which results in always creating a session if one doesn't already exists. ServletEndpointContext.getHttpSession javadoc specifies that null should be returned if no session already exists. The implementation should probably be: request.getSession(false).