IBM Support

PH20912: Unable to set SameSite cookie option with response.addheader

Download


Downloadable File

Abstract

Unable to set SameSite cookie option with response.addheader

Download Description

PH20912 resolves the following problem:

ERROR DESCRIPTION:
Unable to set samesite cookie option with response.addHeader

LOCAL FIX: N/A

PROBLEM SUMMARY:

USERS AFFECTED:
All users of WebSphere Application Server

PROBLEM DESCRIPTION:
Unable to set the SameSite cookie attribute when using the HttpServletResponse.set/addHeader API

RECOMMENDATION:
None

The SameSite cookie attribute is not currently supported by the IBM WebSphere Application Server. This leads the HTTP channel to not recognize the attribute as valid, which might result in the creation of a new Set-Cookie header, with the name of SameSite, when the attribute is set into Set-Cookie headers or existing cookies.

PROBLEM CONCLUSION:
The HTTP channel code was changed to recognize the SameSite cookie attribute as a valid cookie attribute for cookies set by applications with HttpServletResponse.set/addHeader APIs.

Follow the SameSite RFE to be updated on changes to SameSite handling cookies set directly by the Application Server:
https://www.ibm.com/developerworks/rfe/execute?use_case=viewRfe&CR_ID=119022

The fix for this APAR is targeted for inclusion in fix packs 8.5.5.18, 9.0.5.4, and Liberty 20.0.0.2.
The Git issue for Open Liberty can be found here: https://github.com/OpenLiberty/open-liberty/issues/10384 .
Refer to the Recommended Updates page for delivery information:
http://www.ibm.com/support/docview.wss? rs=180&uid=swg27004980
 

Prerequisites

Download the UpdateInstaller below to install the V70 fix.

URL SIZE(Bytes)
UpdateInstaller 7250000

Installation Instructions

Review the readme.txt for detailed installation instructions.

URL SIZE(Bytes)
V90 Readme 3916
V85 Readme (8.5.5.17) 3986
V85 Readme 4032
V80 Readme 3970
V70 Readme 6659

Download Package

DOWNLOAD RELEASE DATE SIZE(Bytes) DOWNLOAD Options
What is Fix Central(FC)?
9.0.5.1-WS-WAS-IFPH20912 03 February 2020 268398 FC
8.5.5.17-WS-WAS-IFPH20912 22 April 2020 267336 FC
8.5.5.11-WS-WAS-IFPH20912 03 February 2020 273986 FC
8.0.0.15-WS-WAS-IFPH20912 05 February 2020 266492 FC
7.0.0.45-WS-WAS-IFPH20912 05 February 2020 18459 FC

Problems Solved

PH20912

On

Technical Support

Contact IBM Support at https://www.ibm.com/software/mysupport/s/ or 1-800-IBM-SERV (US only).

Document Location

Worldwide

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"ARM Category":[{"code":"a8m50000000CdG7AAK","label":"Maintenance"}],"ARM Case Number":"","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF012","label":"IBM i"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"},{"code":"PF035","label":"z\/OS"}],"Version":"8.5.5.11;8.5.5.12;8.5.5.13;8.5.5.14;8.5.5.15;8.5.5.16;8.5.5.17;9.0.5.1;9.0.5.2;8.0.0.15;7.0.0.45","Edition":"Base,Developer,Enterprise,Express,Network Deployment,Single Server","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
22 April 2020

UID

ibm11288756