Merge pull request #235 from hongwei1/develop

refactor/set the secure and http-only to true as default
This commit is contained in:
Simon Redfern 2023-11-21 16:37:03 +01:00 committed by GitHub
commit 33f9610edb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -18,4 +18,12 @@ PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
<url-pattern>/*</url-pattern>
</filter-mapping>
<!--set the status of HttpOnly and Secure cookie flags-->
<session-config>
<cookie-config>
<secure>true</secure>
<http-only>true</http-only>
</cookie-config>
</session-config>
</web-app>