Well, this can't be! How are others solving this?
On Wednesday, April 23, 2014 5:04:15 PM UTC+2, stephanos wrote: > > Hi there, > > how do we make our JSESSIONID-Cookie HttpOnly? > > We know that App Engine runs on Servlet 2.5 which doesn't support this > flag, but there must be a way around this. > > Regards > Stephan > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to google-appengine+unsubscr...@googlegroups.com. To post to this group, send email to google-appengine@googlegroups.com. Visit this group at http://groups.google.com/group/google-appengine. For more options, visit https://groups.google.com/d/optout.
