hc-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Oleg Kalnichevski (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HTTPCLIENT-1872) Add HttpOnly boolean to Cookie, ClientCookie etc.
Date Tue, 26 Sep 2017 20:50:01 GMT

    [ https://issues.apache.org/jira/browse/HTTPCLIENT-1872?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16181545#comment-16181545
] 

Oleg Kalnichevski commented on HTTPCLIENT-1872:
-----------------------------------------------

@[~rsand] Please note one can use {{ClientCookie#containsAttribute}} to find out if a cookie
has {{HttpOnly}} attribute. We cannot add a new method to the {{Cookie}} interface in 4.5.x
but certainly can in 5.x. 

A PR at Github is quite welcome.

Oleg

> Add HttpOnly boolean to Cookie, ClientCookie etc.
> -------------------------------------------------
>
>                 Key: HTTPCLIENT-1872
>                 URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1872
>             Project: HttpComponents HttpClient
>          Issue Type: New Feature
>          Components: HttpClient (classic)
>    Affects Versions: 4.5.3
>            Reporter: Richard Sand
>             Fix For: 5.0 Alpha3
>
>
> The Cookie interface does not support the HttpOnly attribute as specified in RFC-6265
section 4.1.2.6 ("The HttpOnly Attribute"). Presently in a project where the HttpClient is
being used to implement a reverse proxy, we are losing the HttpOnly attribute set from the
back-end server. I'd be happy to create a patch for 4.5.4 if it helps



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org


Mime
View raw message