title: Resolving Session Fixation in JBoss
body: <p>I need to prevent <a href="http://www.owasp.org/index.php/Session_Fixation" rel="noreferrer">Session Fixation</a>, a particular type of session hijacking, in a Java web application running in JBoss. However, it appears that the standard idiom <a href="http://www.owasp.org/index.php/Session_Fixation_in_Java" rel="noreferrer">doesn't work in JBoss</a>. Can this be worked around?</p>