[MYFACES-4418] Same Site and HSTS support

• Type: Improvement
• Status: Closed
• Priority: Critical
• Resolution: Duplicate
• Affects Version/s: 2.3.9
• Component/s: General
• Environment: Redhat Linux
• Assignee: Unassigned
• Reporter: Andrew Charles Cilia
• Created: 07/Oct/21 06:56
• Updated: 07/Oct/21 09:15
• Resolved: 07/Oct/21 09:15

Description

Security auditors have pointed out that the session cookie oam.Flash.RENDERMAP.TOKEN and other  myfaces cookies are not handling Same Site and HTTP Strict Transport Security. 

I do not know how to reply to this although I have looked around for information I cannot find any.