Author: kkolinko
Date: Wed Apr 21 02:27:11 2010
New Revision: 936139
URL: http://svn.apache.org/viewvc?rev=936139&view=rev
Log:
vote and proposal
Modified:
tomcat/tc6.0.x/trunk/STATUS.txt
Modified: tomcat/tc6.0.x/trunk/STATUS.txt
URL:
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=936139&r1=936138&r2=936139&view=diff
==============================================================================
--- tomcat/tc6.0.x/trunk/STATUS.txt (original)
+++ tomcat/tc6.0.x/trunk/STATUS.txt Wed Apr 21 02:27:11 2010
@@ -287,6 +287,12 @@ PATCHES PROPOSED TO BACKPORT:
* Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=49158
http://svn.apache.org/viewvc?view=revision&revision=935998
+1: fhanik, markt
+ -1: kkolinko: 1) because Response#addSessionCookieInternal(..) skips
+ cookies.add(cookie); call
+ 2) you need to take care of the useHttpOnly flag
-1:
-
+* Configure Tomcat to use HttpOnly for session cookies by default
+
http://people.apache.org/~kkolinko/patches/2010-04-21_tc6_context_httpOnly.patch
+ +1: kkolinko
+ -1:
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
