[tor-bugs] #27926 [Metrics/Website]: Session cookie being set on `metrics.torporject.org`

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Oct 3 18:39:19 UTC 2018


#27926: Session cookie being set on `metrics.torporject.org`
-----------------------------+------------------------------
 Reporter:  modik            |          Owner:  metrics-team
     Type:  defect           |         Status:  new
 Priority:  Medium           |      Milestone:
Component:  Metrics/Website  |        Version:
 Severity:  Normal           |     Resolution:
 Keywords:                   |  Actual Points:
Parent ID:                   |         Points:
 Reviewer:                   |        Sponsor:
-----------------------------+------------------------------

Comment (by karsten):

 Here's a possible, semi-tested patch that I'm going to test more next
 week:

 {{{
 @@ -22,6 +22,11 @@
          <New class="org.apache.tomcat.util.scan.StandardJarScanner" />
        </Arg>
      </Call>
 +    <Get name="sessionHandler">
 +      <Get name="sessionManager">
 +        <Set name="usingCookies" type="boolean">false</Set>
 +      </Get>
 +    </Get>
    </New>

    <Call class="org.eclipse.jetty.webapp.Configuration$ClassList"
 name="setServerDefault">
 }}}

 We'll probably want to do the same on ExoneraTor and Onionoo.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27926#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list