appscan 安全漏洞修复
1.会话标识未更新：登录页面加入以下代码

3.启用不安全HTTP方法

<servlet> <servlet-name> default1 </servlet-name> <servlet-class> org.apache.catalina.servlets.DefaultServlet </servlet-class> <init-param> <param-name> debug </param-name> <param-value> 0 </param-value> </init-param> <init-param> <param-name> listings </param-name> <param-value> false </param-value> </init-param> <load-on-startup> 1 </load-on-startup> </servlet> <servlet-mapping> <servlet-name> default1 </servlet-name>         <url-pattern> / </url-pattern> <servlet-mapping>