Author: markt Date: Mon Jun 7 15:06:19 2010 New Revision: 952261 URL: http://svn.apache.org/viewvc?rev=952261&view=rev Log: Further revisions to the patch
Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=952261&r1=952260&r2=952261&view=diff ============================================================================== --- tomcat/tc6.0.x/trunk/STATUS.txt (original) +++ tomcat/tc6.0.x/trunk/STATUS.txt Mon Jun 7 15:06:19 2010 @@ -65,12 +65,9 @@ PATCHES PROPOSED TO BACKPORT: * Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=48379 Make session cookie name, domain and path configurable per context. Updated patch in response to review comments from kkolinko & rjung - http://people.apache.org/~markt/patches/2010-05-18-bug48379.patch + http://people.apache.org/~markt/patches/2010-06-07-bug48379.patch +1: markt - -1: kkolinko: Reviewing the code it looks that - context.getSessionCookieName() now returns null by default, like it does - in TC7. That is good, but this null result is not taken care of in - Request.java, JvmRouteBinderValve.java + -1: * Configure Tomcat to use HttpOnly for session cookies by default http://people.apache.org/~kkolinko/patches/2010-04-21_tc6_context_httpOnly.patch --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org