How to enable/disable httpOnly Cookie in Tomcat

Solution Verified - Updated -


  • How do I enable httpOnly cookie in Tomcat?
  • I tried setting <httponly> to false in my web.xml but it had no impact; how can I disable httpOnly cookies on Tomcat?


  • Red Hat JBoss Enterprise Web Server (EWS)
    • 1.x
    • 2.x
    • 3.x
    • 5.x
  • Tomcat
    • 7
    • 8
    • 9

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In