session.getAttribute does NOT return null after session timeout period gets over
<p>I want to know why request.getSession().getAttribute(user) does not return null even though the timeout period i gave in web.xml is over.  </p>

<pre><code>&lt;session-config&gt;
    &lt;session-timeout&gt;1&lt;/session-timeout&gt;
  &lt;/session-config&gt;
</code></pre>

<p>As above, the timeout period is 1 min so above code should return null after 1 min. But it returns null only when we disable cookies in the browser. Can you anybody please explain me why this kind of behaviour?</p>
