Re: [jetty-users] SameSite to STRICT

[Joakim Erdfelt <joakim@xxxxxxxxxxx>]

What does the actual HTTP Response that created that JSESSIONID look like?

Joakim Erdfelt / joakim@xxxxxxxxxxx

On Wed, Jul 14, 2021 at 11:07 AM Sai Sankar Challa via jetty-users <jetty-users@xxxxxxxxxxx> wrote:

Hi Team

 

We upgraded our Jetty version to 9.4.38.v20210224 and we want to Set 'SameSite' attribute to 'Strict'  in JSESSIONID for our portal security .

 

We made the code changes as per below in our web.xml and still not seeing any difference.

 

  <session-config>

    <cookie-config>

     <http-only>false</http-only>

     <secure>false</secure>

     <comment>__SAME_SITE_STRICT__</comment>

    </cookie-config>

  </session-config>

 

Browser Cookie

 

 

Can you please through some idea to get this done .

 

Thanks

Sai

 

 

_______________________________________________
jetty-users mailing list
jetty-users@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/jetty-users