java - 没有安全标志的 Cookie jboss 5.1

Question

你好..

  I am trying to fixing Cookie without the secure flag in jboss 5.1

  <myJBossServerInstancePath>/deploy/jbossweb.sar/context.xml

 and also added 

     response.setHeader("SET-COOKIE", "JSESSIONID=" +  session.getId() + ";httpOnly");
response.setHeader("SET-COOKIE", "JSESSIONID=" + session.getId() + "; secure");

仍然缺少安全标志。我的项目是Jboss 5.1和java 1.6，我的错误在哪里？

Answer 1

打开 {JBOSS_HOME}/server/SERVER_NAME/deploy/jbossweb.sar/contex.xml

添加<SessionCookie secure="true" httpOnly="true" />

并重新启动服务器