users@glassfish.java.net

Re: The dreaded http-only issue

From: <forums_at_java.net>
Date: Wed, 23 Nov 2011 02:52:04 -0600 (CST)

There is a defaul-web.xml file in every domain that contains more web
application settings same as you can specify in the corresponding web.xml
file in your web applications.

I had the same problem with cookies and I added this to the session-config
element in my default-web.xml file.

<cookie-config>
<http-only>false</http-only>
</cookie-config>

But note that if you have session-config in your web applications web.xml
file, the default-web.xml configuration will not be used.

/Erik


--
[Message sent by forum member '_-Erik-_']
View Post: http://forums.java.net/node/863401