https://issues.apache.org/bugzilla/show_bug.cgi?id=49749
--- Comment #1 from dheine...@gmail.com 2010-08-16 13:04:28 EDT --- Since the setting of HttpOnly should be controlled by the useHttpOnly attribute of the context, the code should probably read: 798- response.addCookie(cookie) 798+ response.addCookieInternal(cookie, request.getContext.getUserHttpOnly()); -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org