tomcat - how to set jsession id with http -only flag on sun one webserver -
may duplicate question far searched above question related tomcat. , few of methods tried using set http-only flag in web.xml doesn work sun 1 webserver. please suggest me how add http-only jsessionid web application runs on sun 1 webserver.
thanks
the configuration related version of web-app , not related tomcat or webserver 6.0. configuration below possible in version="3.0":
<web-app xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/xmlschema-instance" xsi:schemalocation="http://java.sun.com/xml/ns/javaee web-app_3_0.xsd" version="3.0"> <!-- configuration below possible in version="3.0" --> <session-config> <cookie-config> <http-only>true</http-only> </cookie-config> </session-config> </web-app>