jsp设置cookie的HTTPOnly属性

来源：互联网发布：sql 创建表 id 自增编辑：程序博客网时间：2024/06/07 03:58

一、action中添加Cookie

Cookie userIdCookie = new Cookie("username", userid);userIdCookie.setMaxAge(60 * 60 * 24 * 30);userIdCookie.setPath("/");response.addCookie(userIdCookie);

二、CookieFilter

public class CookieFilter implements Filter{public static final Logger logger = Logger.getLogger(CookieFilter.class);public void destroy(){logger.info("Cookie filter finished.");}public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse,FilterChain filterChain) throws IOException, ServletException {HttpServletRequest req = (HttpServletRequest)servletRequest;HttpServletResponse resp = (HttpServletResponse)servletResponse;Cookie[] cookies = req.getCookies();if(cookies != null){for(int i=0;i<cookies.length;i++){Cookie cookie = cookies[i];if(cookie != null && cookie.getName().equals("username")){String value = cookie.getValue();resp.setHeader("Set-Cookie", "username=" + value + "; Secrue; HTTPOnly; ");}}}filterChain.doFilter(req, resp);}public void init(FilterConfig filterConfig) throws ServletException{}}

三、结果

0 0