@Override
public HttpSession getSession() {
if (facade == null) {
if (SecurityUtil.isPackageProtectionEnabled()) {
final HttpSession fsession = this;
StandardSessionFacade ssf = AccessController.doPrivileged(new PrivilegedAction<StandardSessionFacade>() {
@Override
public StandardSessionFacade run() {
return new StandardSessionFacade(fsession);
}
});
this.facade = ssf;
} else {
facade = new StandardSessionFacade(this);
}
}
return (facade);
}