tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
Subject DO NOT REPLY [Bug 49716] New: HttpOnly flag can't be turned off for JSESSIONID
Date Fri, 06 Aug 2010 07:25:21 GMT

           Summary: HttpOnly flag can't be turned off for JSESSIONID
           Product: Tomcat 7
           Version: unspecified
          Platform: PC
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Servlet & JSP API

Using a simple JSP that contains only text verified that the HTTPOnly flag is
always set for the JSESSIONID when using either of the following



Specifying false should create a JSESSIONID without the HttpOnly flag.

Configure bugmail:
------- You are receiving this mail because: -------
You are the assignee for the bug.

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message