Report question

Question: How to prevent tomcat session hijacking?