Details
-
Task
-
Resolution: Done
-
Major
-
4.2.0.GA_CP06, 4.3.0.GA_CP04
-
None
-
Release Notes
Description
With the fix for JBPAPP-1992 which is included in JBoss Web 2.0.0.CP10, the new behaviour is to use Version 1 cookies instead Version 0 because the older version is linked to the security issue.
With that change, if the customer wants to keep the old behaviour, one would need to add a new file: server/production/conf/catalina.properties and set the following property in there
org.apache.tomcat.util.http.ServerCookie.VERSION_SWITCH=false