-
Enhancement
-
Resolution: Fixed
-
P2
-
6
-
b37
-
generic
-
generic
-
Verified
The HttpOnly attribute for cookies is not part of RFC 2965 but is widely used because it provides a extra level of security.
When a cookie is flagged 'HttpOnly' it means that cookie should not be accessible through scripting but only sent as part of a HTTP request.
When a cookie is flagged 'HttpOnly' it means that cookie should not be accessible through scripting but only sent as part of a HTTP request.
- relates to
-
JDK-6865629 Backport JDK 7 Cookie fixes to JDK 6
-
- Closed
-
-
JDK-6890023 Network: Cookies marked HttpOnly not included in URLConnection requests
-
- Closed
-