Return-Path: 
 <dev-return-94277-apmail-tomcat-dev-archive=tomcat.apache.org@tomcat.apache.org>
Delivered-To: apmail-tomcat-dev-archive@www.apache.org
Received: (qmail 50399 invoked from network); 1 Mar 2009 12:50:01 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 1 Mar 2009 12:50:01 -0000
Received: (qmail 89480 invoked by uid 500); 1 Mar 2009 12:49:54 -0000
Delivered-To: apmail-tomcat-dev-archive@tomcat.apache.org
Received: (qmail 89431 invoked by uid 500); 1 Mar 2009 12:49:54 -0000
Mailing-List: contact dev-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:dev-help@tomcat.apache.org>
List-Unsubscribe: <mailto:dev-unsubscribe@tomcat.apache.org>
List-Post: <mailto:dev@tomcat.apache.org>
List-Id: <dev.tomcat.apache.org>
Reply-To: "Tomcat Developers List" <dev@tomcat.apache.org>
Delivered-To: mailing list dev@tomcat.apache.org
Received: (qmail 89420 invoked by uid 99); 1 Mar 2009 12:49:54 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 01 Mar 2009 04:49:54 -0800
X-ASF-Spam-Status: No, hits=-2000.0 required=10.0
	tests=ALL_TRUSTED
X-Spam-Check-By: apache.org
Received: from [140.211.11.140] (HELO brutus.apache.org) (140.211.11.140)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 01 Mar 2009 12:49:54 +0000
Received: by brutus.apache.org (Postfix, from userid 33)
	id A34F9234C4B0; Sun,  1 Mar 2009 04:49:33 -0800 (PST)
From: bugzilla@apache.org
To: dev@tomcat.apache.org
Subject: DO NOT REPLY [Bug 44382] Need to add support for HTTPOnly session
 cookie parameter
X-Bugzilla-Reason: AssignedTo
X-Bugzilla-Type: newchanged
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: Tomcat 5
X-Bugzilla-Component: Servlet & JSP API
X-Bugzilla-Keywords: 
X-Bugzilla-Severity: enhancement
X-Bugzilla-Who: markt@apache.org
X-Bugzilla-Status: NEW
X-Bugzilla-Priority: P1
X-Bugzilla-Assigned-To: dev@tomcat.apache.org
X-Bugzilla-Target-Milestone: ---
X-Bugzilla-Changed-Fields: 
In-Reply-To: <bug-44382-78@https.issues.apache.org/bugzilla/>
References: <bug-44382-78@https.issues.apache.org/bugzilla/>
Auto-Submitted: auto-generated
Content-Type: text/plain; charset="UTF-8"
MIME-Version: 1.0
Message-Id: <20090301124933.A34F9234C4B0@brutus.apache.org>
Date: Sun,  1 Mar 2009 04:49:33 -0800 (PST)
X-Virus-Checked: Checked by ClamAV on apache.org

https://issues.apache.org/bugzilla/show_bug.cgi?id=44382





--- Comment #17 from Mark Thomas <markt@apache.org>  2009-03-01 04:49:28 PST ---
This has been implemented in 6.0.x and will be included in 6.0.19 onwards. It
is disabled by default so you need to use:

<Context>
  <Manager useHttpOnly="true" />
</Context>

to enable it.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org