Merged HEAD-BUG-FIX (5.0/Cloud) to HEAD (5.0/Cloud)

80114: Merged V4.2-BUG-FIX (4.2.4) to HEAD-BUG-FIX (5.0/Cloud)
      80085: Merged V4.2.2 (4.2.2.11) to V4.2-BUG-FIX (4.2.4)
         79428: MNT-12157 : CLONE - Persistent Cookies vulnerability
            - Make cookies to remove from response a configurable option


git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@82716 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
This commit is contained in:
Will Abson
2014-09-03 15:23:19 +00:00
parent 1e93be231e
commit 041e92b345

View File

@@ -437,6 +437,10 @@
<config evaluator="string-compare" condition="Cookie" replace="true"> <config evaluator="string-compare" condition="Cookie" replace="true">
<cookie> <cookie>
<enableCookie>false</enableCookie> <enableCookie>false</enableCookie>
<cookies-to-remove>
<cookie-to-remove>alfUsername3</cookie-to-remove>
<cookie-to-remove>alfLogin</cookie-to-remove>
</cookies-to-remove>
</cookie> </cookie>
</config> </config>
--> -->