From a8d69f44c614a1344dd6792ff3f4ea08c880928e Mon Sep 17 00:00:00 2001
From: Jan Bartel <janb@webtide.com>
Date: Mon, 15 Aug 2011 17:13:51 +1000
Subject: [PATCH]  352565 - cookie httponly flag ignored

---
 VERSION.txt                                                     | 1 +
 .../src/main/java/org/eclipse/jetty/server/Response.java        | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/VERSION.txt b/VERSION.txt
index d5400e61d13..8a5d64335f8 100644
--- a/VERSION.txt
+++ b/VERSION.txt
@@ -1,6 +1,7 @@
 jetty-8.0.0.RC0-SNAPSHOT
  + Merge from jetty-7.4.3
  + Enable annotations by default
+ + 352565 cookie httponly flag ignored
  + 353285 ServletSecurity annotation ignored
 
 jetty-8.0.0.M3 27 May 2011
diff --git a/jetty-server/src/main/java/org/eclipse/jetty/server/Response.java b/jetty-server/src/main/java/org/eclipse/jetty/server/Response.java
index 5f36bf88393..5b1bc822efa 100644
--- a/jetty-server/src/main/java/org/eclipse/jetty/server/Response.java
+++ b/jetty-server/src/main/java/org/eclipse/jetty/server/Response.java
@@ -125,7 +125,7 @@ public class Response implements HttpServletResponse
                 cookie.getMaxAge(),
                 cookie.getComment(),
                 cookie.getSecure(),
-                false,//cookie.isHttpOnly(),
+                cookie.isHttpOnly(),
                 cookie.getVersion());
     }