httpOnly cookies

e8b0c725 · Matija Obreza · 715db14f · e8b0c725 · e8b0c725
Commit e8b0c725 authored Jun 07, 2016 by Matija Obreza
Hide whitespace changes
Inline Side-by-side

Showing with 6 additions and 1 deletion

src/main/resources/spring/spring.properties src/main/resources/spring/spring.properties +1 -1

src/main/webapp/WEB-INF/web.xml src/main/webapp/WEB-INF/web.xml +5 -0

No files found.
--- a/src/main/resources/spring/spring.properties
+++ b/src/main/resources/spring/spring.properties
@@ -19,7 +19,7 @@ base.hostname=${base.host}:8080
 base.url=http://${base.hostname}
 base.cookie-domain=
 base.cookie-secure=false
-base.cookie-http-only=false
+base.cookie-http-only=true

 # robots.txt
 robots.allow=false

--- a/src/main/webapp/WEB-INF/web.xml
+++ b/src/main/webapp/WEB-INF/web.xml
@@ -320,4 +320,9 @@
 	        <page-encoding>UTF-8</page-encoding>
 	    </jsp-property-group>
 	</jsp-config>
+	<session-config>
+		<cookie-config>
+			<http-only>true</http-only>
+		</cookie-config>
+	</session-config>
 </web-app>