Bug 1305410

Summary:	http-only descriptors which confuse the readers
Product:	[JBoss] JBoss Enterprise Application Platform 6	Reporter:	ksuzumur
Component:	Documentation	Assignee:	Christian Huffman <chuffman>
Status:	CLOSED WONTFIX	QA Contact:
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	6.4.0	CC:	chuffman, eap-docs, sfolkwil
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:	Build Name: 23087, Administration and Configuration Guide-6.4 Build Date: 08-10-2015 16:59:36 Topic ID: 41957-737785 [Latest]
Last Closed:	2019-01-30 19:48:58 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description ksuzumur 2016-02-08 05:22:24 UTC

Title: About http-only Session Management Cookies
http-only descriptors which confuse the readers

Describe the issue:
Before EAP 6.4, http-only parameter is only used in web.xml[1].
Some readers might be confuse the sso/http-only with web.xml/http-only.

[1] How to enable HttpOnly and Secure Cookies in EAP6
https://access.redhat.com/solutions/338313


Suggestions for improvement:
To add a note which mentions the difference each http-only

Additional information:

Comment 1 Christian Huffman 2019-01-30 19:48:58 UTC

I'm closing this issue out due to age. If it persists, file a corresponding JIRA.