Merge remote-tracking branch 'origin/pr/1033'

5 years ago · ce2a56e6f1
parent 590abb40e4 3d54ef1afb
commit ce2a56e6f1
1 changed files with 1 additions and 0 deletions
--- a/airsonic-main/src/main/java/org/airsonic/player/service/PlayerService.java
+++ b/airsonic-main/src/main/java/org/airsonic/player/service/PlayerService.java
@ -151,6 +151,7 @@ public class PlayerService {
            String cookieName = COOKIE_NAME + "-" + StringUtil.utf8HexEncode(username);
            Cookie cookie = new Cookie(cookieName, String.valueOf(player.getId()));
            cookie.setMaxAge(COOKIE_EXPIRY);
+            cookie.setHttpOnly(true);
            String path = request.getContextPath();
            if (StringUtils.isEmpty(path)) {
                path = "/";