Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.
Bug 352565 - cookie httponly flag ignored
Summary: cookie httponly flag ignored
Status: RESOLVED FIXED
Alias: None
Product: Jetty
Classification: RT
Component: server (show other bugs)
Version: unspecified   Edit
Hardware: All All
: P3 major (vote)
Target Milestone: 7.5.x   Edit
Assignee: Jan Bartel CLA
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-07-20 08:15 EDT by Sebastian Tusk CLA
Modified: 2011-08-15 03:16 EDT (History)
2 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sebastian Tusk CLA 2011-07-20 08:15:39 EDT 
Build Identifier: 

See http://git.eclipse.org/c/jetty/org.eclipse.jetty.project.git/commit/jetty-server/src/main/java/org/eclipse/jetty/server/Response.java?h=jetty-8&id=9f386395e77c0ef880d4fddb23ddbcdda4e06614

In Response.addCookie instead of passing the httponly value as specified in the Cookie object false is used for the httponly parameter.

Reproducible: Always
Comment 1 Jan Bartel CLA 2011-08-15 03:16:38 EDT 
Fixed for jetty-8.0.0.RC0.