diff --git a/core/src/main/java/org/springframework/security/ui/SessionFixationProtectionFilter.java b/core/src/main/java/org/springframework/security/ui/SessionFixationProtectionFilter.java index 89b461e404..90e1e05f9c 100644 --- a/core/src/main/java/org/springframework/security/ui/SessionFixationProtectionFilter.java +++ b/core/src/main/java/org/springframework/security/ui/SessionFixationProtectionFilter.java @@ -150,6 +150,11 @@ public class SessionFixationProtectionFilter extends SpringSecurityFilter { startNewSession(); super.sendRedirect(location); } + + public void flushBuffer() throws IOException { + startNewSession(); + super.flushBuffer(); + } /** * Calls startNewSessionIfRequired()