[WICKET-6429] AbstractRequestLogger should not create new Sessions

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 7.8.0
• Fix Version/s: 8.0.0-M7, 7.9.0
• Component/s: wicket
• Assignee: Martin Tzvetanov Grigorov
• Reporter: Martin Tzvetanov Grigorov
• Created: 26/Jul/17 08:45
• Updated: 26/Jul/17 08:51
• Resolved: 26/Jul/17 08:51

Description

org.apache.wicket.protocol.http.AbstractRequestLogger#requestTime() uses Session.get() without checking whether a session exists just to log its id and ISessionInfo.

It should not create new sessions!

...
        at org.apache.wicket.Application.fetchCreateAndSetSession(Application.java:1717)
        at org.apache.wicket.Session.get(Session.java:169)
        at org.apache.wicket.protocol.http.AbstractRequestLogger.requestTime(AbstractRequestLogger.java:221)
        at org.apache.wicket.Application$3.onDetach(Application.java:1797)
   ...