|
|
|
|
Turn on the HttpOnly flag for session cookies within Oracle WebLogic Server for the Empirica Signal software
Using the HttpOnly flag when generating a cookie helps mitigate the risk of a client-side script accessing the protected cookie.
Perform these steps on the application server.
To turn on the HttpOnly flag for session cookies:
- Navigate to the <INSTALL_DIR>/Signal/WEB-INF directory.
- Open the weblogic.xml file, and locate the <session-descriptor> section.
- If the section does not contain the following element, add the element:
<wls:cookie-http-only>true</wls:cookie-http-only>
Note: When the element is set to true, users must use Microsoft Internet Explorer 10 or 11 and Java 8 or later to run DataMontage patient profiles as applets. Users running older releases should deselect the Run DataMontage as applet user preference.
