search

google-code-export / activeweb

Automatically exported from code.google.com/p/activeweb
0 stars 0 forks source link

Add HttpOnly support for cookie #132

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
Servlet 2.5 api does not allow to set cookie HttpOnly, but Servlet 3.0 does. 
Other option is to bypass servlet cookie api entirely and use plain Set-Cookie 
response header.

Original issue reported on code.google.com by vasyal...@gmail.com on 2 May 2013 at 7:32