You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@tapestry.apache.org by "Jochen Kemnade (JIRA)" <ji...@apache.org> on 2016/07/14 05:47:20 UTC

[jira] [Closed] (TAP5-2327) The Cookies interface should provide an option to mark cookies as httpOnly

     [ https://issues.apache.org/jira/browse/TAP5-2327?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jochen Kemnade closed TAP5-2327.
--------------------------------
       Resolution: Fixed
         Assignee: Jochen Kemnade
    Fix Version/s: 5.5.0

> The Cookies interface should provide an option to mark cookies as httpOnly
> --------------------------------------------------------------------------
>
>                 Key: TAP5-2327
>                 URL: https://issues.apache.org/jira/browse/TAP5-2327
>             Project: Tapestry 5
>          Issue Type: New Feature
>          Components: tapestry-core
>    Affects Versions: 5.3.7, 5.4
>            Reporter: Martin Schneider
>            Assignee: Jochen Kemnade
>              Labels: desired_for_5.5, patch
>             Fix For: 5.5.0
>
>         Attachments: 0001-TAP-2327-add-httpOnly-method-to-support-Servlet-3.0.patch, 0001-TAP-2327-add-support-for-httpOnly-cookies-and-settin.patch, 0002-TAP-2327-add-support-for-version-and-comment.patch
>
>
> Since Servlet 3.0 there is an option to mark cookies as httpOnly via javax.servlet.http.Cookie.setHttpOnly(boolean). There should be an option to use that in org.apache.tapestry5.services.Cookies. In 5.3.7 the default implementation does not set the httpOnly flag.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)