DO NOT REPLY [Bug 45632] New: HttpOnly Cookie support in 6.0.18

https://issues.apache.org/bugzilla/show_bug.cgi?id=45632

Summary: HttpOnly Cookie support in 6.0.18
Product: Tomcat 6
Version: unspecified
Platform: PC
OS/Version: Windows XP
Status: NEW
Severity: normal
Priority: P2
Component: Servlet & JSP API
AssignedTo: [email protected]
ReportedBy: [email protected]


We are seeing a different behavior in the cookie support between Tomcat version
6.0.14 and 6.0.18. The following code worked in 6.0.14 but not in 6.0.18.

Is there an explanation or is there a work around?

String sessionId = "Our Session ID";
String cookieValue = sessionId + "; Path=/; HttpOnly ";
Cookie cookie = new Cookie("sessionId", cookieValue);
cookie.setVersion(1);
response.addCookie(cookie);


Thanks,
Kal