Secure cookie in JAVA

[padmapraveen_vasili]

Hi allthis was traced out by our senior engineers.they have identified that the login pages /service/jsp/index.jsp and /ourproj/controller are sending the JSESSIONID the secure attribute. If the secure attribute is not specified, a cookie is considered safe to be sent in the clear over unsecured channels which can occur when traffic is traveling over multiple gateways. If the cookies are sent in clear, they can be intercepted and used by an attacker to directly access a user session.how can i make up this issue to make my appilcation secure to use.They recommend that any cookie of the website which handles privileged functionality such as authentication items are sent using the secure attribute

[Chocolate570]

This is the javascript section. The W3S forum currently does not have a JSP section, so unless someone happens to look at this topic, I suggest you go to another forum and ask.