CODEWITHSUNDEEP
tomcat
bear
bear

Reputation: 87

Session JSession Id in tomcat 5.5.27

My tomcat was 5.5.27. Is it anyway to secure the jession id like add the secure="true" in tomcat 6.0?

Thanks in advance.

Upvotes: 0

Views: 93

Answers (1)

Christopher Schultz
Christopher Schultz

Reputation: 20882

secure="true" has no bearing on the "secure" attribute of a JSESSIONID cookie. If you want to set the "secure" flag in a JSESSIONID's cookie, then you'll have to make sure that the user's HttpSession is created during a request over HTTPS.

Upvotes: 1

Related Questions