refactor/set the secure and http-only to true as default

This commit is contained in:
Hongwei 2023-11-21 16:26:32 +01:00
parent ee427a35fd
commit 5ff8bbca65

View File

@ -18,4 +18,12 @@ PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
<url-pattern>/*</url-pattern>
</filter-mapping>
<!--set the status of HttpOnly and Secure cookie flags-->
<session-config>
<cookie-config>
<secure>true</secure>
<http-only>true</http-only>
</cookie-config>
</session-config>
</web-app>