IBM Support

JR60308: Option to configure HTTPOnly when using WebSphere Commerce with Liberty

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Liberty does not have an option for configuring HTTPOnly. This
    options needs to be implemented in WebSphere Commerce.
    

Local fix

  • n/a
    

Problem summary

  • USERS AFFECTED:
    WebSphere Commerce Version 9
    
    PROBLEM ABSTRACT:
    Option to configure HTTPOnly when using WebSphere Commerce with
    Liberty
    
    BUSINESS IMPACT:
    Customer cannot configure the HttpOnly flag for cookies
    
    RECOMMENDATION:
    

Problem conclusion

  • Introduced a new option to set HttpOnly for cookies.
    
    Added the below configuring to your /crs/xml/config/wc-store.xml
     file, just before this line: "    </InstanceProperties>"
    
            <SessionManagement>
    	      <cookie httponly="false" />
        	</SessionManagement>
    
    When the configuration is not set, the default value is true.
    

Temporary fix

Comments

APAR Information

  • APAR number

    JR60308

  • Reported component name

    WC BUS EDITION

  • Reported component ID

    5724I3800

  • Reported release

    900

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-11-16

  • Closed date

    2018-11-21

  • Last modified date

    2018-11-21

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WC BUS EDITION

  • Fixed component ID

    5724I3800

Applicable component levels

  • R900 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSYSYL","label":"WebSphere Commerce Enterprise"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"9.0","Line of Business":{"code":"LOB31","label":"WCE Watson Marketing and Commerce"}}]

Document Information

Modified date:
11 December 2021