Reputation:
Hello there..
I am trying to fixing Cookie without the secure flag in jboss 5.1
<myJBossServerInstancePath>/deploy/jbossweb.sar/context.xml
and also added
response.setHeader("SET-COOKIE", "JSESSIONID=" + session.getId() + ";httpOnly");
response.setHeader("SET-COOKIE", "JSESSIONID=" + session.getId() + "; secure");
still secure flag missing. My project is Jboss 5.1 and java 1.6,Where is my mistake?
Upvotes: 0
Views: 778
Reputation: 823
Open {JBOSS_HOME}/server/SERVER_NAME/deploy/jbossweb.sar/contex.xml
Add <SessionCookie secure="true" httpOnly="true" />
And restart the server
Upvotes: 1