Bug 1305410

Summary: http-only descriptors which confuse the readers
Product: [JBoss] JBoss Enterprise Application Platform 6 Reporter: ksuzumur
Component: DocumentationAssignee: Christian Huffman <chuffman>
Status: CLOSED WONTFIX QA Contact:
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 6.4.0CC: chuffman, eap-docs, sfolkwil
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Build Name: 23087, Administration and Configuration Guide-6.4 Build Date: 08-10-2015 16:59:36 Topic ID: 41957-737785 [Latest]
Last Closed: 2019-01-30 19:48:58 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description ksuzumur 2016-02-08 05:22:24 UTC
Title: About http-only Session Management Cookies
http-only descriptors which confuse the readers

Describe the issue:
Before EAP 6.4, http-only parameter is only used in web.xml[1].
Some readers might be confuse the sso/http-only with web.xml/http-only.

[1] How to enable HttpOnly and Secure Cookies in EAP6
https://access.redhat.com/solutions/338313


Suggestions for improvement:
To add a note which mentions the difference each http-only

Additional information:

Comment 1 Christian Huffman 2019-01-30 19:48:58 UTC
I'm closing this issue out due to age. If it persists, file a corresponding JIRA.