Coding With Fun
Home Docker Django Node.js Articles Python pip guide FAQ Policy

How can i secure cookies in jboss eap5?


Asked by Frankie Stokes on Dec 06, 2021 FAQ



In JBoss EAP5 there was an option available for Securing cookies using the "$PROFILE\deploy\jbossweb.sar\context.xml" . How can I to achieve the same thing in EAP 6 ?
Similarly,
Support, security patches, and bug fixes for all JBoss EAP 5.x versions will no longer be generally available. Customers using any of these versions (5.0, 5.1, 5.2) will need to take action to continue to be supported.
In addition, EAP 6 does not have "jbossweb.sar", but it is a fully certified EE6 container which follows the Servlet 3.0 specification. According to the specification "All servlet containers MUST provide an ability to configure whether or not the container marks the session tracking cookie as "HttpOnly".
In fact,
JBoss Migration Toolkit / Windup: supports code analysis of your EAP 4/5/6 applications for required changes to move to EAP 6 or 7 An upgrade to a newer version provides an opportunity to modernize your application and application infrastructure, e.g.
Also Know,
When using cookies over a secure channel, servers SHOULD set the Secure attribute (see Section 4.1.2.5) for every cookie. If a server does not set the Secure attribute, the protection provided by the secure channel will be largely moot.