How to Remove the JSessionID Parameter from Confluence URL
Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.
Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
There could be security concerns when the JSessionID appears in the URL's query string, as in
.
To remove the JSessionID parameter from the URL query string:
Shutdown Confluence
Go to
<confluence_installation_directory>/conf/web.xmlFind <session-config>
Within the <session-config> element add the following parameter:
1<tracking-mode>COOKIE</tracking-mode>Save the file
Restart Confluence to pick up the change
Was this helpful?