-1

I want to make my cookie secure and http request only. I've seen many post like this and seem to work fine, but using configuration files and servlet +2.5. What I basically want to do is to set my cookie http only and (if possible) ssl only as well.

Andronicus
  • 25,419
  • 17
  • 47
  • 88
Manika Sawant
  • 1

1 Answers1

0

Servlet 2.5 not support to allow cookies to be marked as HttpOnly. Servlet 3.0 has provision to allow cookies to be marked as HttpOnly.

user12681417
  • 1