You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@tapestry.apache.org by "Martin Schneider (JIRA)" <ji...@apache.org> on 2014/04/29 11:27:14 UTC

[jira] [Created] (TAP5-2327) The Cookies interface should provide an option to mark cookies as httpOnly

Martin Schneider created TAP5-2327:
--------------------------------------

             Summary: The Cookies interface should provide an option to mark cookies as httpOnly
                 Key: TAP5-2327
                 URL: https://issues.apache.org/jira/browse/TAP5-2327
             Project: Tapestry 5
          Issue Type: Bug
          Components: tapestry-core
    Affects Versions: 5.3.7
            Reporter: Martin Schneider


Since Servlet 3.0 there is an option to mark cookies as httpOnly via javax.servlet.http.Cookie.setHttpOnly(boolean). There should be an option to use that in org.apache.tapestry5.services.Cookies. In 5.3.7 the default implementation ignores the httpOnly flag.



--
This message was sent by Atlassian JIRA
(v6.2#6252)