damonmiller/cfesapi — Issue #3: jsessionid cookie not working for httponly
Author: mhenke
Created: 2012-01-03 16:28:12+00:00
State: open

- modification of JSESSIONID cookie not working for HttpOnly, Secure, and reset (killCookie) - fix this! - this causes problems when the J2EE session expires; if killCookie worked would resolve this - right now, you have manually delete the JSESSIONID cookie from browser to get around this