From 5ff8bbca650e7497da0e7406d381959bd811f81c Mon Sep 17 00:00:00 2001
From: Hongwei <hongwei@tesobe.com>
Date: Tue, 21 Nov 2023 16:26:32 +0100
Subject: [PATCH] refactor/set the secure and http-only to true as default

---
 src/main/webapp/WEB-INF/web.xml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/src/main/webapp/WEB-INF/web.xml b/src/main/webapp/WEB-INF/web.xml
index 67747101..0244c159 100755
--- a/src/main/webapp/WEB-INF/web.xml
+++ b/src/main/webapp/WEB-INF/web.xml
@@ -18,4 +18,12 @@ PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
   <url-pattern>/*</url-pattern>
 </filter-mapping>
 
+<!--set  the status of HttpOnly and Secure cookie flags-->
+<session-config>
+  <cookie-config>
+    <secure>true</secure>
+    <http-only>true</http-only>
+  </cookie-config>
+</session-config>
+  
 </web-app>