java - how to set JSESSIONID cookie as secure using Spring security 2 and Apache Tomcat 7 setting -
how set jsessionid cookie secure using spring security 2 , apache tomcat 7 setting.
have put in code below in web.xml , deosn't seem working.
<cookie-config> <secure>true</secure> </cookie-config> thanks
use following:
<session-config> <cookie-config> <secure>true</secure> <http-only>true</http-only> </cookie-config> </session-config>
Comments
Post a Comment