java - how to set JSESSIONID cookie as secure using Spring security 2 and Apache Tomcat 7 setting -


how set jsessionid cookie secure using spring security 2 , apache tomcat 7 setting.

have put in code below in web.xml , deosn't seem working.

<cookie-config>    <secure>true</secure> </cookie-config> 

thanks

use following:

<session-config>   <cookie-config>     <secure>true</secure>     <http-only>true</http-only>   </cookie-config> </session-config> 

Comments

Popular posts from this blog

Glib GIOChannel -

jsp - java.sql.SQLException: [Microsoft][ODBC Microsoft Access > Driver] Too few parameters. Expected 1 -

python - Obscure curses error message when creating a sub window -