https://issues.apache.org/bugzilla/show_bug.cgi?id=44382

--- Comment #23 from August Detlefsen <augu...@codemagi.com> 2010-01-31 
12:23:31 UTC ---
(In reply to comment #22)
> This has been applied to 5.5.x and will be included in 5.5.28 onwards.

On Tomcat 5.5.28, when using context.xml.default to setup attributes for all
contexts, this appears to have no effect. For example, in my
context.xml.default for a particular host I have: 

<Context reloadable="true" swallowOutput="true" crossContext="true"
allowLinking="true" unpackWAR="false" useHttpOnly="true">

And yet if I setup a page with: 

<script type="text/javascript">
document.write(document.cookie);
</script>

I still get cookie information written to the output: 

JSESSIONID=A7FB0749E8CDE79E7687E2DABF932BE2;
JSESSIONID=7924B5D74D10AD458191C6292196C87A 

Do I need to specify this individually for every context?

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to