how do we make our JSESSIONID-Cookie HttpOnly? We know that App Engine runs on Servlet 2.5 which doesn't support this flag, but there must be a way around this.
確定! 回上一頁