Spring 3.1 CookieGenerator does not support HttpOnly property added in servlet 3.0 [SPR-9794] #14427
Labels
in: web
Issues in web modules (web, webmvc, webflux, websocket)
type: enhancement
A general enhancement
Milestone
Vladimir Semenov opened SPR-9794 and commented
org.springframework.web.util.CookieGenerator does not support setting HttpOnly property on cookies which makes it unusable for a lot of use cases. javax.servlet.http.Cookie now has a setHttpOnly method as of Servlet API 3.
Affects: 3.1 GA
Referenced from: commits aa4d9c4, e670975
1 votes, 2 watchers
The text was updated successfully, but these errors were encountered: