<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How to fix security vulnerability with cookies to make them HttpOnly and Secure? in Alfresco Forum</title>
    <link>https://connect.hyland.com/t5/alfresco-forum/how-to-fix-security-vulnerability-with-cookies-to-make-them/m-p/13135#M5788</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Dear All - I am new to Alfresco world.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Presently we have &lt;SPAN&gt;Alfresco&amp;nbsp;&lt;/SPAN&gt;5.0 environment and I am working on fixing a vulnerability related to cookies. Please can someone&amp;nbsp;direct me where to make the changes to make cookies HttpOnly and Secure?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I tried making these changes in context.xml (&amp;lt;content useHttpOnly = "true"&amp;gt;) and in server.xml &amp;lt;Connector port"8080"...secure="true"&amp;gt; but this is not fixing the issue. Instead it is causing login issue with share.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Regards&lt;/P&gt;&lt;P&gt;Srikar&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Thu, 18 May 2017 05:02:56 GMT</pubDate>
    <dc:creator>srikarvr</dc:creator>
    <dc:date>2017-05-18T05:02:56Z</dc:date>
    <item>
      <title>How to fix security vulnerability with cookies to make them HttpOnly and Secure?</title>
      <link>https://connect.hyland.com/t5/alfresco-forum/how-to-fix-security-vulnerability-with-cookies-to-make-them/m-p/13135#M5788</link>
      <description>Dear All - I am new to Alfresco world.Presently we have Alfresco&amp;nbsp;5.0 environment and I am working on fixing a vulnerability related to cookies. Please can someone&amp;nbsp;direct me where to make the changes to make cookies HttpOnly and Secure?I tried making these changes in context.xml (&amp;lt;content useHttpO</description>
      <pubDate>Thu, 18 May 2017 05:02:56 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-forum/how-to-fix-security-vulnerability-with-cookies-to-make-them/m-p/13135#M5788</guid>
      <dc:creator>srikarvr</dc:creator>
      <dc:date>2017-05-18T05:02:56Z</dc:date>
    </item>
    <item>
      <title>Re: How to fix security vulnerability with cookies to make them HttpOnly and Secure?</title>
      <link>https://connect.hyland.com/t5/alfresco-forum/how-to-fix-security-vulnerability-with-cookies-to-make-them/m-p/13136#M5789</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;hi &lt;A _jive_internal="true" data-userid="168185" data-username="srikarvr" href="https://community.alfresco.com/people/srikarvr" rel="nofollow noopener noreferrer"&gt;&lt;SPAN style="color: #0066cc; text-decoration: underline;"&gt;Srikar Velala&lt;/SPAN&gt;&lt;/A&gt;&amp;nbsp;,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Did you fix this issue. if so please give me the solution.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 14 Nov 2017 20:59:32 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-forum/how-to-fix-security-vulnerability-with-cookies-to-make-them/m-p/13136#M5789</guid>
      <dc:creator>bhargav_vempall</dc:creator>
      <dc:date>2017-11-14T20:59:32Z</dc:date>
    </item>
  </channel>
</rss>

