Preventative measures have also been taken to protect against session fixation attacks.

Tomcat 7还针对会话固定攻击(sessionfixation attack)采取了一些防御措施。