-
Type:
New Feature
-
Status: Closed
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 5.3.7, 5.4
-
Fix Version/s: 5.5.0
-
Component/s: tapestry-core
-
Labels:
Since Servlet 3.0 there is an option to mark cookies as httpOnly via javax.servlet.http.Cookie.setHttpOnly(boolean). There should be an option to use that in org.apache.tapestry5.services.Cookies. In 5.3.7 the default implementation does not set the httpOnly flag.
- is blocked by
-
TAP5-2548 Upgrade embedded Jetty and Tomcat versions
-
- Closed
-