2 ms·Stick "?jsessionid=<random 80 character string>" in front of the xss and no one will ever look.by joshuamorton 6y agoStick "?jsessionid=<random 80 character string>" in front of the xss and no one will ever look.