According to the HttpServletRequest API, a call to getSession() creates a new session if one has not been created. And a call to getSession(boolean) does not create a new one if none exists.
As implemented in version .4, getSession() returns a session only if one was previously set by setSession(), and getSession(false) will return a session only if getSession() has been called before...
2008-01-21 21:15:20 UTC in Mockrunner
