Java / Servlet Interview Questions

How to protect session cookies in Servlet?

For Java EE 6 (Servlet 3.0) the setHttpOnly and setSecure methods can be used to protect HTTP Cookies.

For older Java versions, there are no API available to directly set the HttpOnly and Secure flags. The workaround is creating a custom SET-COOKIE header.

String sessionId = request.gerSession().getId();
Response.setHeader("SET-COOKIE", "JSESSIONID=" + sessionId + "; HttpOnly; Secure");

More Related questions...

What is servlet? Advantages of Servlet over CGI. Can we retrieve remote client MAC address from the Servlet request? How do you logout a session user in servlet? How to protect session cookies in Servlet? Can we call servlet destroy() from service()? Difference between out.println and System.out.println in JSP Scriptlet. What happens when JSTL expression encounter NullPointerException? What are the methods of the HttpServletRequest object often used to implement programmatic authorization checks? Methods of Java EE container security. List a few annotations relevant to container security. Types of authentication methods. Mention important techniques that are used when sending data securely between source and destination over networks. Common security concerns when building secure servers. Security features provided by SOAP messaging standard. What should be used to prevent Javascript from accessing a Session ID value?

Show more question and Answers...

log4j

	Interviews Questions Java Spring Hibernate DevOps Testing API BigData Web Erlang AI Database Integration Cloud Python Scala Tools Golang SAP	About Javapedia.net Javapedia.net is for Java and J2EE developers, technologist and college students who prepare of interview. Also this site includes many practical examples. This site is developed using J2EE technologies by Steve Antony, a senior Developer/lead at one of the logistics based company. Follow Javapedia updates
	contact: javatutorials2016[at]gmail[dot]com
Kindly consider donating for maintaining this website. Thanks.
	Copyright © 2026, javapedia.net, all rights reserved. Privacy Policy · Terms of Service.

Java / Servlet Interview Questions

How to protect session cookies in Servlet?

Comments & Discussions

Recently added questions