项目原先部署在tomcat6下面被甲方扫出漏洞要求整改，移植到tomcat9后登录莫名出现
An invalid domain was specified for this cookie
在网上找了很多资料也是让修改成合法的域名说tomcat8.5开始解析cookie变了，但是无论怎么修改代码中的域名均无效，后来找到了一篇老外写的文章，按其中的方法很快解决。ps:老外就是牛x
Set tomcat to use LegacyCookieProcessor (because Rfc6265CookieProcessor complies with RFC6265 which does not allow domains beginning with non-alphanumeric characters):
1. Edit the Tomcat/conf/content.xml
2. Add the statement in betweeen the <context> and </context> tags:
<CookieProcessor className="org.apache.tomcat.util.http.LegacyCookieProcessor" />
3. Restart Tomcat.
An invalid domain was specified for this cookie
猜你喜欢
转载自blog.csdn.net/jarniyy/article/details/80500749
今日推荐
周排行