Merge pull request #400 from coheigea/AMQ-7322

AMQ-7322 - Add HTTPOnly flag to the webconsole + REST API Cookies
2019-10-18 19:03:21 +02:00 · 2019-10-18 19:03:21 +02:00 · 830a4c0391
parent c26742235f 63b1238c4d
commit 830a4c0391
2 changed files with 11 additions and 2 deletions
--- a/activemq-web-console/src/main/webapp/WEB-INF/web.xml
+++ b/activemq-web-console/src/main/webapp/WEB-INF/web.xml
@ -155,7 +155,10 @@
  </error-page>
  
  <session-config>
-  	<session-timeout>30</session-timeout>
+    <session-timeout>30</session-timeout>
+    <cookie-config>
+      <http-only>true</http-only>
+    </cookie-config>
  </session-config>

  <context-param>
--- a/assembly/src/release/webapps/api/WEB-INF/web.xml
+++ b/assembly/src/release/webapps/api/WEB-INF/web.xml
@ -71,4 +71,10 @@
        <url-pattern>/jolokia/*</url-pattern>
    </servlet-mapping>

-</web-app>
+    <session-config>
+        <cookie-config>
+            <http-only>true</http-only>
+        </cookie-config>
+    </session-config>
+
+</web-app>