[activemq-artemis] branch main updated: ARTEMIS-4124 Set the SameSite flag on all cookies

[jbertram]

This is an automated email from the ASF dual-hosted git repository.

jbertram pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/activemq-artemis.git


The following commit(s) were added to refs/heads/main by this push:
     new 58978ad94a ARTEMIS-4124 Set the SameSite flag on all cookies
58978ad94a is described below

commit 58978ad94a7a0df2ea459e1aa5291962e8dba95c
Author: Domenico Francesco Bruscino <brus...@apache.org>
AuthorDate: Wed Jan 4 11:44:53 2023 +0100

    ARTEMIS-4124 Set the SameSite flag on all cookies
---
 .../java/org/apache/activemq/artemis/component/WebServerComponent.java   | 1 +
 1 file changed, 1 insertion(+)

diff --git 
a/artemis-web/src/main/java/org/apache/activemq/artemis/component/WebServerComponent.java
 
b/artemis-web/src/main/java/org/apache/activemq/artemis/component/WebServerComponent.java
index 00c2724a65..56842d3b49 100644
--- 
a/artemis-web/src/main/java/org/apache/activemq/artemis/component/WebServerComponent.java
+++ 
b/artemis-web/src/main/java/org/apache/activemq/artemis/component/WebServerComponent.java
@@ -134,6 +134,7 @@ public class WebServerComponent implements 
ExternalComponent, WebServerComponent
                WebAppContext webContext = createWebAppContext(app.url, 
app.war, dirToUse, virtualHosts[i]);
                handlers.addHandler(webContext);
                webContext.setInitParameter(DIR_ALLOWED, "false");
+               
webContext.getSessionHandler().getSessionCookieConfig().setComment("__SAME_SITE_STRICT__");
                webContextData.add(new Pair(webContext, binding.uri));
             }
          }