atl.xsrf.token HttpOnly set to true

How to set this to false. We do not have a proxy in front of fisheye and httponly is set to true. We are having multiple issues.

1 answer

Comments for this post are closed

Community moderators have prevented the ability to post new answers.

1 vote

Welcome to the community @Catherine Aldrich

That is a Tomcat setting, so you must modify context.xml on the server(s).

ref: https://confluence.atlassian.com/jira064/preventing-security-attacks-720412500.html#PreventingSecurityAttacks-ConfiguringTomcattouseHttpOnlySessionIDCookies

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

We use apache-tomcat for Mercurial which is also on this server. It does not server up the fisheye website. Also, there is no context.xml .

Note this is fisheye/crucible, not Jira

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

Was this helpful?

Thanks!

Fisheye/Crucible

DEPLOYMENT TYPE

SERVER

Forums

Q&A

Community resources

Support

Top groups

Community resources

Support

Learn

Community resources

Support

Events

Community resources

Support

atl.xsrf.token HttpOnly set to true

1 answer

Comments for this post are closed

Was this helpful?

Thanks!

DEPLOYMENT TYPE

TAGS

Atlassian Community Events