RE: [coldbox:24692] [Coldbox 4] Session Fixation

Not that I’m aware. Is there something you’d like to see implemented?

Happy Connecting. Sent from my Sprint Samsung Galaxy S® 5

I was just wondering before I bring over code I had used in our legacy system for session rotation. This is to meet a STIG requirement for our system. If you are not using J2EE sessions then you can just use the SessionRotate function built into CF10/CF11 (https://wikidocs.adobe.com/wiki/display/coldfusionen/SessionRotate). For J2EE I use the following solution: http://www.petefreitag.com/item/829.cfm

Thanks,
Chad