SessionAuthentication._session
is not marked as transient
#12309
Labels
Bug
For general bugs on Jetty side
SessionAuthentication._session
is not marked as transient
#12309
Jetty version(s)
jetty-12.0.x
Jetty Environment
core security
The
org.eclipse.jetty.security.authentication.SessionAuthentication
class has aHttpSession _session
data member which must be marked astransient
to prevent it being serialized. This keyword is missing.The text was updated successfully, but these errors were encountered: