I have set the following property in websphere for the jsession cookie
com.ibm.ws.webcontainer.HTTPOnlyCookies
.
Any idea how best to test this using JavaScript in Firefox or IE?
It's a pain in IE. I have IE9 so your screens may be different.
Press F12, go to the network tab, and then press Start Capturing. Back in IE then open the page you want to view. Back in the F12 window you show see all the individual HTTP requests, select the one that's the page or asset you're checking the cookies on and double click on it. You should then be able to see all the response headers and cookies on their relevant tabs.
Edit:
A HttpOnly Cookie would look something like this:
Set-Cookie: SessionId=z5ymkk45aworjo2l31tlhqqv; path=/; HttpOnly
The cookie may not be sent with every response, so you may need to clear all of your cookies and then try again to make sure one is sent with the request you're monitoring.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With