Hi, I´ve set useHttpOnly="true" in /opt/jboss/server/<myserver>/deploy/jboss-web.deployer/context.xml.
<Context cookies="true" crossContext="true" useHttpOnly="true"> .... </Context> But the cookie continues to respond to javascript commands. Any ideas appreciated. Thanks, Andre X-Powered-By: Servlet 2.4; JBoss-4.2.0.GA_CP02 (build: SVNTag=JBPAPP_4_2_0_GA_CP02 date=200801291544)/Tomcat-5.5 -- View this message in context: http://www.nabble.com/useHttpOnly---how-to--tp24518467p24518467.html Sent from the Tomcat - User mailing list archive at Nabble.com. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org