RE: Setting samesite attribute on JSESSIONID

2019-10-13 Thread David Cleary
On 10/10/19 14:08, David Cleary wrote: > Have a customer asking about this. I see Tomcat supports it here. > https://tomcat.apache.org/tomcat-9.0-doc/config/cookie-processor.html > .apache.org > > > We currently use defaults, so I'm looking for an XML fragment and > the file it goes in to add the s

Re: Setting samesite attribute on JSESSIONID

2019-10-11 Thread Thad Humphries
On Thu, Oct 10, 2019 at 2:08 PM David Cleary wrote: > Have a customer asking about this. I see Tomcat supports it here. > https://tomcat.apache.org/tomcat-9.0-doc/config/cookie-processor.html > > We currently use defaults, so I'm looking for an XML fragment and the file > it goes in to add the sa

Re: Setting samesite attribute on JSESSIONID

2019-10-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Dave, On 10/10/19 14:08, David Cleary wrote: > Have a customer asking about this. I see Tomcat supports it here. > https://tomcat.apache.org/tomcat-9.0-doc/config/cookie-processor.html > > > We currently use defaults, so I'm looking for an XML fragm