useHttpOnly - how to?
Hi, I´ve set useHttpOnly=true in /opt/jboss/server/myserver/deploy/jboss-web.deployer/context.xml. Context cookies=true crossContext=true useHttpOnly=true /Context But the cookie continues to respond to javascript commands. Any ideas appreciated. Thanks, Andre X-Powered-By: Servlet 2.4; JBoss-4.2.0.GA_CP02 (build: SVNTag=JBPAPP_4_2_0_GA_CP02 date=200801291544)/Tomcat-5.5 -- View this message in context: http://www.nabble.com/useHttpOnly---how-to--tp24518467p24518467.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: useHttpOnly - how to?
X-Powered-By: Servlet 2.4; JBoss-4.2.0.GA_CP02 (build: SVNTag=JBPAPP_4_2_0_GA_CP02 date=200801291544)/Tomcat-5.5 There is a build date in the above header. useHttpOnly is a recent feature. It was not implemented back in January 2008. Also, that JBoss version is using Tomcat 5.5. For 5.5 branch it will be in Tomcat 5.5.28 (not yet released). For 6.0 it is available since 6.0.20 release. (or 6.0.19, but that version was not released) Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: useHttpOnly - how to?
Thanks for your reply. It appears on http://tomcat.apache.org/tomcat-6.0-doc/config/context.html; but not in http://tomcat.apache.org/tomcat-5.5-doc/config/context.html;. Andre Konstantin Kolinko wrote: X-Powered-By: Servlet 2.4; JBoss-4.2.0.GA_CP02 (build: SVNTag=JBPAPP_4_2_0_GA_CP02 date=200801291544)/Tomcat-5.5 There is a build date in the above header. useHttpOnly is a recent feature. It was not implemented back in January 2008. Also, that JBoss version is using Tomcat 5.5. For 5.5 branch it will be in Tomcat 5.5.28 (not yet released). For 6.0 it is available since 6.0.20 release. (or 6.0.19, but that version was not released) Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -- View this message in context: http://www.nabble.com/useHttpOnly---how-to--tp24518467p24521714.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: useHttpOnly - how to?
2009/7/16 acastanheira2001 acastanheira2...@yahoo.com.br: Thanks for your reply. It appears on http://tomcat.apache.org/tomcat-6.0-doc/config/context.html; but not in http://tomcat.apache.org/tomcat-5.5-doc/config/context.html;. If you are confused, those files are updated when a release is done, not when someone updates them. Konstantin Kolinko wrote: X-Powered-By: Servlet 2.4; JBoss-4.2.0.GA_CP02 (build: SVNTag=JBPAPP_4_2_0_GA_CP02 date=200801291544)/Tomcat-5.5 There is a build date in the above header. useHttpOnly is a recent feature. It was not implemented back in January 2008. Also, that JBoss version is using Tomcat 5.5. For 5.5 branch it will be in Tomcat 5.5.28 (not yet released). For 6.0 it is available since 6.0.20 release. (or 6.0.19, but that version was not released) - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
