How to add HttpOnly Attribute for Sensitive Cookies in Jetty Server 8.1.3

Asked Jun 13 '23 at 00:18

Active Jun 13 '23 at 00:18

Viewed 16 times

I am using Jetty server 8.1.3.

I need to add HttpOnly Attribute for Sensitive Cookies ((ServletContextHandler) context).setInitParameter("org.eclipse.jetty.servlet.SessionCookie", "SessionID");

I don't see a property to add httonly attrbiute to session of Servlet context handler.

Any pointer would be great help!!

Thanks

I can see some methods for Jetty server 9 in https://www.tabnine.com/code/java/methods/org.eclipse.jetty.server.session.SessionHandler/getSessionCookieConfig

but can not see for Jetty server 8.1.3

asked Jun 13 '23 at 00:18

user3506319

Jetty Server 8.x was End of Life back in 2014. (and has many vulnerabilities now) – Joakim Erdfelt Jun 26 '23 at 20:53
Previously answered at https://stackoverflow.com/questions/44553017/setting-httponly-and-secure-in-web-xml – Joakim Erdfelt Jun 26 '23 at 20:55

How to add HttpOnly Attribute for Sensitive Cookies in Jetty Server 8.1.3

0 Answers0