You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by ma...@apache.org on 2019/05/20 08:11:42 UTC

[tomcat] branch master updated: Correct location of same-site docs

This is an automated email from the ASF dual-hosted git repository.

markt pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/tomcat.git


The following commit(s) were added to refs/heads/master by this push:
     new 4473156  Correct location of same-site docs
4473156 is described below

commit 447315632652211827fe969a7f2cc29b52c952fe
Author: Mark Thomas <ma...@apache.org>
AuthorDate: Mon May 20 09:11:19 2019 +0100

    Correct location of same-site docs
    
    Common attributes is for attributes defined on the interface - i.e.
    attributes every implementation must provide.
---
 webapps/docs/config/cookie-processor.xml | 47 ++++++++++++++++++++++----------
 1 file changed, 32 insertions(+), 15 deletions(-)

diff --git a/webapps/docs/config/cookie-processor.xml b/webapps/docs/config/cookie-processor.xml
index 2d9f004..f2d2e9c 100644
--- a/webapps/docs/config/cookie-processor.xml
+++ b/webapps/docs/config/cookie-processor.xml
@@ -64,19 +64,6 @@
         used.</p>
       </attribute>
 
-      <attribute name="sameSiteCookies" required="false">
-        <p>Enables setting same-site cookie attribute.</p>
-
-        <p>If value is <code>none</code> then the same-site cookie attribute
-        won't be set. This is the default value.</p>
-
-        <p>If value is <code>lax</code> then the browser only sends the cookie
-        in same-site requests and cross-site top level GET requests.</p>
-
-        <p>If value is <code>strict</code> then the browser prevents sending the
-        cookie in any cross-site request.</p>
-      </attribute>
-
     </attributes>
 
   </subsection>
@@ -107,8 +94,25 @@
       <li>The cookie header is always preserved.</li>
     </ul>
 
-    <p>No additional attributes are supported by the <strong>RFC 6265 Cookie
-    Processor</strong>.</p>
+    <p>The <strong>RFC 6265 Cookie Processor</strong> supports the following
+    additional attributes.</p>
+
+    <attributes>
+
+      <attribute name="sameSiteCookies" required="false">
+        <p>Enables setting same-site cookie attribute.</p>
+
+        <p>If value is <code>none</code> then the same-site cookie attribute
+        won't be set. This is the default value.</p>
+
+        <p>If value is <code>lax</code> then the browser only sends the cookie
+        in same-site requests and cross-site top level GET requests.</p>
+
+        <p>If value is <code>strict</code> then the browser prevents sending the
+        cookie in any cross-site request.</p>
+      </attribute>
+
+    </attributes>
 
   </subsection>
 
@@ -167,6 +171,19 @@
         </p>
       </attribute>
 
+      <attribute name="sameSiteCookies" required="false">
+        <p>Enables setting same-site cookie attribute.</p>
+
+        <p>If value is <code>none</code> then the same-site cookie attribute
+        won't be set. This is the default value.</p>
+
+        <p>If value is <code>lax</code> then the browser only sends the cookie
+        in same-site requests and cross-site top level GET requests.</p>
+
+        <p>If value is <code>strict</code> then the browser prevents sending the
+        cookie in any cross-site request.</p>
+      </attribute>
+
     </attributes>
 
   </subsection>


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org