> From: Christopher Schultz [mailto:ch...@christopherschultz.net] 
> Subject: Re: Unable to store a session with Tomcat 7 linux and Internet 
> Explorer

> Simple initial observations show that the cookie returned by Tomcat 7
> has the "Version:1" and "HttpOnly" options set.

So a few quick things to try:

1) Set the useHttpOnly attribute to false in the <Context> of interest.

2) Set the system property 
org.apache.tomcat.util.http.ServerCookie.ALLOW_HTTP_SEPARATORS_IN_V0 to false.

3) Set the system property 
org.apache.tomcat.util.http.ServerCookie.ALLOW_NAME_ONLY to false (which is 
actually the default).

Also, if org.apache.catalina.STRICT_SERVLET_COMPLIANCE is set to true, try 
turning it off.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

Reply via email to