Session cookie

[Mohammed Imran <Mohammed.Imran@xxxxxxxxxxxxxxxxxx>]

Hi,

 

I need to enable the session security cookie to httponly.I tried to update the context.xml

 

<!-- The contents of this file will be loaded for each web application -->

<Context useHttpOnly="true">

 

    <!-- Default set of monitored resources -->

    <WatchedResource>WEB-INF/web.xml</WatchedResource>

 

    <!-- Uncomment this to disable session persistence across Tomcat restarts -->

    <!--

    <Manager pathname="" />

    -->

 

But it doesn’t work.

 

 

"CONFIDENTIALITY NOTICE: This message and any attachment are confidential and may also be privileged. If you are not the intended recipient of this e-mail you may not copy, forward, disclose or otherwise use it or any part of it in any form whatsoever. If you are not the intended recipient please telephone or e-mail the sender and delete this message and any attachment from your system."