366044 - A new window has the old window's session.

Status: RESOLVED DUPLICATE of bug 117222

(Firefox :: General, defect)

Description

[prettywolf]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; zh-CN; rv:1.8.1.1) Gecko/20061208 Firefox/2.0.0.1
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; zh-CN; rv:1.8.1.1) Gecko/20061208 Firefox/2.0.0.1

When is open a new url www.test.com/setSession.jsp.It work simple:
session.setAttribute("username","prettywolf");
Then i open url www.test.com/getSession.jsp.It work like this:
out.println(session.getAttribute("username"));
the firefox will display:prettywolf
Test:
open setSession.jsp with firefox ,I call i window.A.
Then open a new firefox window ,url is www.gmail.com ,I call i window.B
now I close the window.A, open a new window with firefox,url:getSession.jsp --window.C
the window.C will display: prettywolf,but I think it will display null instead.
window.A is closed,the session username will destory.It is not?

Reproducible: Always

Steps to Reproduce:
1.
2.
3.

Comment 1

[Jo Hermans]

Firefox has only 1 session for all windows (so all windows share the same cookies, etc ...), this is different form Internet Explorer (which keeps cookies separate between windows). This means for instance that you can log in only once in Firefox ; you can't keep 2 windows with different identities, or use 2 different shopping carts on the same website (which is what you were testing here ?).

See bug 117222.

Comment 2

[prettywolf]

Thank you for your reply.I'm a chinese boy,A not standard programmer.
But I think each window with different identities it will work well.
Some one open a shopping website,and open a new music website to listen music.But he will go out.He only close the shopping website and go out at once.leave the music web.Now other people use his computer ,and open the shopping website in the firefox history,he can do something the ower of the computer not wish.
Test website:
http://www.jk333.net/setSession.jsp
http://www.jk333.net/getSession.jsp

Comment 3

[Jo Hermans]

That's the way most browsers work, except Internet Explorer. That's explained in bug 117222. If you do not want that this happens, you have to close all windows. Or lock your computer.

Note that when you close the browser window in Internet Explorer, you loose all the cookies and the authentication, and you have to log in again. That can also be seen as a disadvantage !