java - how to set JSESSIONID cookie as secure using Spring security 2 and Apache Tomcat 7 setting -


how set jsessionid cookie secure using spring security 2 , apache tomcat 7 setting.

have put in code below in web.xml , deosn't seem working.

<cookie-config>    <secure>true</secure> </cookie-config> 

thanks

use following:

<session-config>   <cookie-config>     <secure>true</secure>     <http-only>true</http-only>   </cookie-config> </session-config> 

Comments

Popular posts from this blog

c# - SVN Error : "svnadmin: E205000: Too many arguments" -

c# - Copy ObservableCollection to another ObservableCollection -

All overlapping substrings matching a java regex -