You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@myfaces.apache.org by lo...@apache.org on 2018/08/30 12:14:44 UTC

[myfaces-tobago] branch master updated: clarify some web.xml tags

This is an automated email from the ASF dual-hosted git repository.

lofwyr pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/myfaces-tobago.git


The following commit(s) were added to refs/heads/master by this push:
     new a0a4bce  clarify some web.xml tags
a0a4bce is described below

commit a0a4bce88dd93f9d44ee78a6af2dda5ebd9cf432
Author: Udo Schnurpfeil <lo...@apache.org>
AuthorDate: Thu Aug 30 14:14:37 2018 +0200

    clarify some web.xml tags
---
 tobago-example/tobago-example-blank/src/main/webapp/WEB-INF/web.xml | 3 ++-
 tobago-example/tobago-example-demo/src/main/webapp/WEB-INF/web.xml  | 3 ++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/tobago-example/tobago-example-blank/src/main/webapp/WEB-INF/web.xml b/tobago-example/tobago-example-blank/src/main/webapp/WEB-INF/web.xml
index 339c353..3a87233 100644
--- a/tobago-example/tobago-example-blank/src/main/webapp/WEB-INF/web.xml
+++ b/tobago-example/tobago-example-blank/src/main/webapp/WEB-INF/web.xml
@@ -57,9 +57,10 @@
   </welcome-file-list>
 
   <session-config>
+    <!-- for WebSphere you need to comment out this block, because WebSphere want to set it himself -->
     <cookie-config>
       <http-only>true</http-only>
-      <!--only for https-->
+      <!-- with secure=true you can only use https, not http -->
       <!--<secure>true</secure>-->
     </cookie-config>
   </session-config>
diff --git a/tobago-example/tobago-example-demo/src/main/webapp/WEB-INF/web.xml b/tobago-example/tobago-example-demo/src/main/webapp/WEB-INF/web.xml
index ee0161f..09bcad8 100644
--- a/tobago-example/tobago-example-demo/src/main/webapp/WEB-INF/web.xml
+++ b/tobago-example/tobago-example-demo/src/main/webapp/WEB-INF/web.xml
@@ -173,9 +173,10 @@
   </welcome-file-list>
 
   <session-config>
+    <!-- for WebSphere you need to comment out this block, because WebSphere want to set it himself -->
     <cookie-config>
       <http-only>true</http-only>
-      <!--only for https-->
+      <!-- with secure=true you can only use https, not http -->
       <!--<secure>true</secure>-->
     </cookie-config>
   </session-config>