Http-Only cookies in WebLogic: what versions support them/how and why are they supported?
- by John
We want to make all cookies set by our webapp http-only. I only have a basic understanding of the benefits of doing this but I'm told by security people that it's a Good Thing (tm) Our app is running under JDK1.6.05 and WebLogic10.3.0
After way too much digging around Oracle's website for documentation, I've found good evidence that the first…