32
tomcat设置httpOnly-bipig0724的博客
source link: http://blog.51cto.com/2074199/2073136
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
经常看到一些人说tomcat6不支持httponly，查阅官方帮助文档后发现是可以支持的，[tomcat6的context.xml配置说明](http://tomcat.apache.org/tomcat-6.0-doc/config/context.html)为什么需要httponlysessionid一般是以cookie的形式储存和传送的，除非禁用cookie；cookie是可以通过javas
Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK