[AMBARI-13272] Backport from 2.1.0 - Set HttpOnly and Secure flags for Ambari session cookies

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.2
• Fix Version/s: 2.0.3
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 30/Sep/15 01:20
• Updated: 01/Oct/15 14:58
• Resolved: 01/Oct/15 14:58

Description

Ambari should set the following flags for session cookies.

1) https://www.owasp.org/index.php/HttpOnly

2) https://www.owasp.org/index.php/SecureFlag

#2 only needs to be set when people configure for Ambari HTTPS

Issue Links

• is a clone of: AMBARI-11129 Set HttpOnly and Secure flags for Ambari session cookies
• links to: ReviewBoard