Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.

Bug 352565

Summary: cookie httponly flag ignored
Product: [RT] Jetty Reporter: Sebastian Tusk <eclipse-bugs.20.scyt>
Component: serverAssignee: Jan Bartel <janb>
Status: RESOLVED FIXED QA Contact:
Severity: major    
Priority: P3 CC: janb, jetty-inbox
Version: unspecified   
Target Milestone: 7.5.x   
Hardware: All   
OS: All   
Whiteboard:

Description Sebastian Tusk CLA 2011-07-20 08:15:39 EDT
Build Identifier: 

See http://git.eclipse.org/c/jetty/org.eclipse.jetty.project.git/commit/jetty-server/src/main/java/org/eclipse/jetty/server/Response.java?h=jetty-8&id=9f386395e77c0ef880d4fddb23ddbcdda4e06614

In Response.addCookie instead of passing the httponly value as specified in the Cookie object false is used for the httponly parameter.

Reproducible: Always
Comment 1 Jan Bartel CLA 2011-08-15 03:16:38 EDT
Fixed for jetty-8.0.0.RC0.