Uploaded image for project: 'Hippo CMS'
  1. Hippo CMS
  2. CMS-7013

Keepalive in template composer does not work when HttpOnly session cookies are used

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Normal
    • Resolution: Fixed
    • 2.24.01, 2.26.00
    • 2.26.00-alpha-1, 2.26.00
    • None

    Description

      When Tomcat is configured to use HttpOnly session cookies, the keepalive call in the template composer no longer works.

      HttpOnly session cookies are enabled in Tomcat's context.xml file, as follows:

      <Context useHttpOnly="true">

      The template composer checks whether the current session is valid, and only executes the keepalive call when that's the case. However, with HttpOnly session cookies you cannot access the session cookie from JavaScript anymore. The check therefore always fails, and the ping is no longer executed.

      Attachments

        Issue Links

          Activity

            People

              jsheriff Junaidh Kadhar Sheriff
              mdenburger Mathijs den Burger (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: