Example

public class ClassA { private HttpSession session; public void useSession (HttpServletRequest hsr) { session = hsr.getSession(); //do something... } }

Solution

To avoid resource leaks, ensure that invalidate() is invoked on every javax.servlet.http.HttpSession. Note: This rule applies to HttpSessions returned by javax.servlet.http.HttpServletRequest.getSession() and javax.servlet.http.HttpServletRequest.getSession(boolean).

public class ClassA { private HttpSession session; public void useSession (HttpServletRequest hsr) { session = hsr.getSession(); //do something... session.invalidate(); } }