I also use the state pattern to pass information around. Thanks for the hint about using CmsJspActionElement's request attributes for that instead of the HttpSession. It should make things safe against bugs due to a stateful server when used with multiple concurrent browser windows. Best regards, Christoph