Securing session cookies

Follow the steps below to set the secure flag for Cascade CMS session cookies:

• Stop Cascade CMS
• Edit tomcat/conf/web.xml
• Locate <session-config> and place the following code within those tags:
  

  <cookie-config> 
     <http-only>true</http-only>
     <secure>true</secure>
    </cookie-config>

• Save
• Start Cascade CMS