Enthuware

Hi,

Session context is not thread-safe. The question assumes that only LoginServlet can modify the "userid" attribute but it could exist other servlet invoked in the same session that could modify this attribute.

You should specify that the only servlets in the application are this ones or there are only requests to this servlets.

It's difficult to be accurate when one of the options is "None of the above".

Best Regards,
Denis

Your point is valid but a general rule while answering such questions is that anything that is not specified in the question does not impact the answer. Even so, the problem statement has been added to the question.

thank you for your feedback!