Community
Products
Fisheye/Crucible
Questions
atl.xsrf.token HttpOnly set to true

atl.xsrf.token HttpOnly set to true

How to set this to false. We do not have a proxy in front of fisheye and httponly is set to true. We are having multiple issues.

1 answer

1 vote

Welcome to the community @Catherine Aldrich

That is a Tomcat setting, so you must modify context.xml on the server(s).

ref: https://confluence.atlassian.com/jira064/preventing-security-attacks-720412500.html#PreventingSecurityAttacks-ConfiguringTomcattouseHttpOnlySessionIDCookies

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

We use apache-tomcat for Mercurial which is also on this server. It does not server up the fisheye website. Also, there is no context.xml .

Note this is fisheye/crucible, not Jira

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

Suggest an answer

Was this helpful?

Thanks!

Fisheye/Crucible

DEPLOYMENT TYPE

SERVER

Product Q&A

Community resources

Support

Top groups

Community resources

Support

Learn

Community resources

Support

Events

Community resources

Support

Get product advice from experts

Join a community group

Advance your career with learning paths

Earn badges and rewards

Connect and share ideas at events

atl.xsrf.token HttpOnly set to true

1 answer

Suggest an answer

Was this helpful?

Thanks!

DEPLOYMENT TYPE

TAGS

Atlassian Community Events