I have an iframe within a page that is continually polling the server for a session variable that is being actively updated by a \"main\" XHR.
So basically:
Yes, default session manager (using files) locks the session file when you do session_start and releases it when you do session_write_close (or the scripts ends). Meanwhile other scripts trying to access session, wait to the release. a detailed article here or at the manual session-write-close