There could be security concerns when the JSessionID appears in the URL's query string, as in .

To remove the JSessionID parameter from the URL query string:

1. Shutdown Confluence
2. Go to <confluence_installation_directory>/conf/web.xml
3. Find <session-config>

4. Within the <session-config> element add the following parameter:

   <tracking-mode>COOKIE</tracking-mode>

5. Save the file

6. Restart Confluence to pick up the change