Download
Downloadable File
| File link | File size | File description |
|---|---|---|
Abstract
Unable to set SameSite cookie option with response.addheader
Download Description
PH20912 resolves the following problem:
ERROR DESCRIPTION:
Unable to set samesite cookie option with response.addHeader
LOCAL FIX: N/A
PROBLEM SUMMARY:
USERS AFFECTED:
All users of WebSphere Application Server
PROBLEM DESCRIPTION:
Unable to set the SameSite cookie attribute when using the HttpServletResponse.set/addHeader API
RECOMMENDATION:
None
The SameSite cookie attribute is not currently supported by the IBM WebSphere Application Server. This leads the HTTP channel to not recognize the attribute as valid, which might result in the creation of a new Set-Cookie header, with the name of SameSite, when the attribute is set into Set-Cookie headers or existing cookies.
PROBLEM CONCLUSION:
The HTTP channel code was changed to recognize the SameSite cookie attribute as a valid cookie attribute for cookies set by applications with HttpServletResponse.set/addHeader APIs.
Follow the SameSite RFE to be updated on changes to SameSite handling cookies set directly by the Application Server:
https://www.ibm.com/developerworks/rfe/execute?use_case=viewRfe&CR_ID=119022
The fix for this APAR is targeted for inclusion in fix packs 8.5.5.18, 9.0.5.4, and Liberty 20.0.0.2.
The Git issue for Open Liberty can be found here: https://github.com/OpenLiberty/open-liberty/issues/10384 .
Refer to the Recommended Updates page for delivery information:
http://www.ibm.com/support/docview.wss? rs=180&uid=swg27004980
ERROR DESCRIPTION:
Unable to set samesite cookie option with response.addHeader
LOCAL FIX: N/A
PROBLEM SUMMARY:
USERS AFFECTED:
All users of WebSphere Application Server
PROBLEM DESCRIPTION:
Unable to set the SameSite cookie attribute when using the HttpServletResponse.set/addHeader API
RECOMMENDATION:
None
The SameSite cookie attribute is not currently supported by the IBM WebSphere Application Server. This leads the HTTP channel to not recognize the attribute as valid, which might result in the creation of a new Set-Cookie header, with the name of SameSite, when the attribute is set into Set-Cookie headers or existing cookies.
PROBLEM CONCLUSION:
The HTTP channel code was changed to recognize the SameSite cookie attribute as a valid cookie attribute for cookies set by applications with HttpServletResponse.set/addHeader APIs.
Follow the SameSite RFE to be updated on changes to SameSite handling cookies set directly by the Application Server:
https://www.ibm.com/developerworks/rfe/execute?use_case=viewRfe&CR_ID=119022
The fix for this APAR is targeted for inclusion in fix packs 8.5.5.18, 9.0.5.4, and Liberty 20.0.0.2.
The Git issue for Open Liberty can be found here: https://github.com/OpenLiberty/open-liberty/issues/10384 .
Refer to the Recommended Updates page for delivery information:
http://www.ibm.com/support/docview.wss? rs=180&uid=swg27004980
Prerequisites
Download the UpdateInstaller below to install the V70 fix.
| URL | SIZE(Bytes) |
|---|---|
| UpdateInstaller | 7250000 |
Installation Instructions
Review the readme.txt for detailed installation instructions.
| URL | SIZE(Bytes) |
|---|---|
| V90 Readme | 3916 |
| V85 Readme (8.5.5.17) | 3986 |
| V85 Readme | 4032 |
| V80 Readme | 3970 |
| V70 Readme | 6659 |
Download Package
| DOWNLOAD | RELEASE DATE | SIZE(Bytes) | DOWNLOAD Options What is Fix Central(FC)? |
|---|---|---|---|
| 9.0.5.1-WS-WAS-IFPH20912 | 03 February 2020 | 268398 | FC |
| 8.5.5.17-WS-WAS-IFPH20912 | 22 April 2020 | 267336 | FC |
| 8.5.5.11-WS-WAS-IFPH20912 | 03 February 2020 | 273986 | FC |
| 8.0.0.15-WS-WAS-IFPH20912 | 05 February 2020 | 266492 | FC |
| 7.0.0.45-WS-WAS-IFPH20912 | 05 February 2020 | 18459 | FC |
Problems Solved
PH20912
On
Technical Support
Contact IBM Support at https://www.ibm.com/software/mysupport/s/ or 1-800-IBM-SERV (US only).
Document Location
Worldwide
[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"ARM Category":[{"code":"a8m50000000CdG7AAK","label":"Maintenance"}],"ARM Case Number":"","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF012","label":"IBM i"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"},{"code":"PF035","label":"z\/OS"}],"Version":"8.5.5.11;8.5.5.12;8.5.5.13;8.5.5.14;8.5.5.15;8.5.5.16;8.5.5.17;9.0.5.1;9.0.5.2;8.0.0.15;7.0.0.45","Edition":"Base,Developer,Enterprise,Express,Network Deployment,Single Server","Line of Business":{"code":"LOB45","label":"Automation"}}]
Problems (APARS) fixed
Problems (APARS) fixed
Was this topic helpful?
Document Information
Modified date:
22 April 2020
UID
ibm11288756