I do have a filter for this purpose. It's configured in the method configureServlets(). Is it any different than configuring it in web.xml?
On Mon, Jun 11, 2018 at 9:58 PM, 'Katayoon (Cloud Platform Support)' via Google App Engine <[email protected]> wrote: > You can add it by implementing a filter > <https://cloud.google.com/appengine/docs/standard/java/config/webxml#filters>. > Here > <https://stackoverflow.com/questions/16398327/set-httponly-and-secure-flags-on-session-cookie-in-google-app-engine>, > you may find a sample on how to implement a security filter which can be > applied for HttpOnly similarly. For any question on Jetty, I recommend that > you post your question in the respective community group > <https://www.eclipse.org/jetty/documentation/current/advanced-contributing.html#community-mailing-lists> > . > > -- > You received this message because you are subscribed to the Google Groups > "Google App Engine" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to [email protected]. > Visit this group at https://groups.google.com/group/google-appengine. > To view this discussion on the web visit https://groups.google.com/d/ > msgid/google-appengine/f94083b3-4452-49e5-a0a1- > d9006912778a%40googlegroups.com > <https://groups.google.com/d/msgid/google-appengine/f94083b3-4452-49e5-a0a1-d9006912778a%40googlegroups.com?utm_medium=email&utm_source=footer> > . > > For more options, visit https://groups.google.com/d/optout. > -- Baojun Xu Tel: +41 79 791 78 99 SolidusLink AG Rütistrasse 16 8952 Schlieren -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/google-appengine. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/CAB65iqnHhjENGSsEiYodJftbYc6ngd_68aDX-hA640kVYza0Qw%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
