Is it advisable to set

<session-config>
        <session-timeout>-1</session-timeout>
    </session-config>

what are the dis advantages of doing so ??? Is there any better way to make sure the session never expires ???

有帮助吗?

解决方案

There are no disadvantages. That just means the session won't expire. How would there be a "better" way?

许可以下: CC-BY-SA归因
不隶属于 StackOverflow
scroll top