because we expose the session id
Just google. Here's one of the first results for exmple: https://www.journaldev.com/1907/java-session-management-servlet-httpsession-url-rewriting
Обсуждают сегодня