NGINX - Missing 'secure' Cookie Attribute

[michaldejmek]

Hi, does anyone know how to set this on nginx:

The cookies:

Set-Cookie: JSESSIONID=***replaced***; Path=/; HttpOnly

are missing the "secure" attribute.

Thank you Michal.

[fabian]

To be honest, why don't you set it in the web.xml so your servlet container will handle that.

You can find it in the WEB-INF directory of the war file.