regenerateExpiredSessionId not working as expected
问题 It is my understanding, according to the MSDN, that regenerateExpiredSessionId="true" specifies that the session ID will be reissued when an expired session ID is specified by the client. However, this does not seem to be working as described. Let's say you have an application configured as follows: <sessionState cookieless="AutoDetect" regenerateExpiredSessionId="true" /> And somewhere else, you have a link to a page in that application in which an expired session ID is embedded: <p><a href=