[Stripes-users] Controlling the session cookie?

2017-06-21 Thread Robert Nicholson
Does stripes allow me to set HttpOnly or Secure on the session cookie that's emitted? Sent from my iPhone -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org!

Re: [Stripes-users] Controlling the session cookie?

2017-06-21 Thread Rick Grashel
Hi Robert, Stripes will not control the settings of the session cookie issued by the container. If you are using Servlet 3.0, you can use a elementsin your web.xml to set both HttpOnly and Secure. If you are using a Servlet version less than 3.0, then you will need to probably check your