Fix wrong logic for setting cookie attribute HttpOnly and Secure to false, see
@@ -1342,14 +1342,10 @@ public class FrameworkUtils {
cookieBuilder.setVersion(cookieConfig.getVersion());
}
- if (cookieConfig.isHttpOnly()) {
cookieBuilder.setHttpOnly(cookieConfig.isHttpOnly());
- }
- if (cookieConfig.isSecure()) {
cookieBuilder.setSecure(cookieConfig.isSecure());
}
- }
public static String getMultiAttributeSeparator() {
