-
Bug
-
Resolution: Done
-
Critical
-
2.3.14.SP1
Servlet 6.0 added the ability to configure arbitrary attributes for session cookies.
ServletSessionConfig is missing the requisite fields to support this.
Additionally, DeploymentManagerImpl.handleDeploymentSessionConfig(...) needs to be updated to apply cookie attributes to the SessionCookieConfig.
- blocks
-
WFLY-19551 Undertow subsystem is missing Servlet 6.0 support for cookie attributes
-
- Pull Request Sent
-
- is incorporated by
-
WFCORE-7462 CVE-2024-3884 CVE-2025-12543 Upgrade Undertow to 2.3.21.Final
-
- Resolved
-