search

viviotech / lucee-installer

BitRock Installer XML config and files for the Lucee installers
http://lucee.viviotech.net/
9 stars 2 forks source link

HTTPOnly Cookies #23

Closed utdream closed 5 years ago

utdream commented 13 years ago

Via Mark Drew and Neiland.net (http://neiland.dyndns.org/blog/article/set-session-cookies-as-httponly-in-coldfusion--railo/).

Need to update the context.xml file to include the following update to the context tag:

<Context useHttpOnly="true">
utdream commented 13 years ago

added to Tomcat 7 config in Railo 3.3 installer.

utdream commented 13 years ago

added to release notes

utdream commented 5 years ago

Looks like this was lost in a Tomcat update. Need to re-add it.

utdream commented 5 years ago

added again in Lucee 5.3.3.062-pl0