- update OWASP
- add deprecated tag for DefaultSessionTimeoutValve.java
git-svn-id: https://svn.apache.org/repos/asf/turbine/core/trunk@1868288 13f79535-47bb-0310-9956-ffa450edef68
diff --git a/conf/test/ConfigurationBuilder.xml b/conf/test/ConfigurationBuilder.xml
index f2ddd47..1e0c018 100644
--- a/conf/test/ConfigurationBuilder.xml
+++ b/conf/test/ConfigurationBuilder.xml
@@ -8,6 +8,7 @@
<properties config-name="user" fileName="usersettings.properties" config-optional="true" config-forceCreate="true"/>
<xml fileName="TurbineResources.xml"/>
<properties config-name="turbine" fileName="TemplateService.properties" throwExceptionOnMissing="true"/>
+ <jndi/>
</override>
<additional>
<!-- Configuration declarations that form a union configuration, always provide a unique config-name attribute -->
diff --git a/src/java/org/apache/turbine/pipeline/DefaultSessionTimeoutValve.java b/src/java/org/apache/turbine/pipeline/DefaultSessionTimeoutValve.java
index 1ab8976..7f5796f 100644
--- a/src/java/org/apache/turbine/pipeline/DefaultSessionTimeoutValve.java
+++ b/src/java/org/apache/turbine/pipeline/DefaultSessionTimeoutValve.java
@@ -36,7 +36,10 @@
* @author <a href="mailto:mpoeschl@marmot.at">Martin Poeschl</a>
* @author <a href="mailto:peter@courcoux.biz">Peter Courcoux</a>
* @version $Id$
+ *
+ * No replacement. Delegate session timeout to the container e.g. in web.xml, which allows to create a session at any place.
*/
+@Deprecated
public class DefaultSessionTimeoutValve
implements Valve
{
