Here's some minor mods to WebKit (from Webware
that you might want to pick up.
The changes are:
- use the per-session timeout value, rather
than the global
SessionTimeout, when checking for expired
- refuse to serve non-regular files
- tell client to discard expired session
- implement Session.invalidate: just clear the
and set timeout=0.