不帶安全標志的Cookie jboss 5.1

Question

你好..

  I am trying to fixing Cookie without the secure flag in jboss 5.1

  <myJBossServerInstancePath>/deploy/jbossweb.sar/context.xml

 and also added 

     response.setHeader("SET-COOKIE", "JSESSIONID=" +  session.getId() + ";httpOnly");
response.setHeader("SET-COOKIE", "JSESSIONID=" + session.getId() + "; secure");

仍然缺少安全標志。 我的項目是Jboss 5.1和Java 1.6，我的錯誤在哪里？

Answer 1

打開{JBOSS_HOME} /server/SERVER_NAME/deploy/jbossweb.sar/contex.xml

添加<SessionCookie secure="true" httpOnly="true" />

並重啟服務器