Check on the session security, seems weak now.
JVC: the ACL servlet filter may be disabled, because it has been causing infinitely-recursive browser redirects on certain error conditions.
Log in to post a comment.