Uploaded image for project: 'Tapestry 5'
  1. Tapestry 5
  2. TAP5-2327

The Cookies interface should provide an option to mark cookies as httpOnly

    XMLWordPrintableJSON

    Details

      Description

      Since Servlet 3.0 there is an option to mark cookies as httpOnly via javax.servlet.http.Cookie.setHttpOnly(boolean). There should be an option to use that in org.apache.tapestry5.services.Cookies. In 5.3.7 the default implementation does not set the httpOnly flag.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                jkemnade Jochen Kemnade
                Reporter:
                mart.schneider Martin Schneider
              • Votes:
                0 Vote for this issue
                Watchers:
                7 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: