Index: lams_build/conf/unix/jboss/jbossweb/context.xml
===================================================================
diff -u -rea79f29aed5c764a223234e456442bc1e49fcf85 -rb1003ae8d1779b2cc8ff4347e0943da4e1755a6f
--- lams_build/conf/unix/jboss/jbossweb/context.xml	(.../context.xml)	(revision ea79f29aed5c764a223234e456442bc1e49fcf85)
+++ lams_build/conf/unix/jboss/jbossweb/context.xml	(.../context.xml)	(revision b1003ae8d1779b2cc8ff4347e0943da4e1755a6f)
@@ -13,6 +13,11 @@
    role for servlet init/destroy events.
    -->
    <InstanceListener>org.jboss.web.tomcat.security.RunAsListener</InstanceListener>
+
+   <!-- LDEV-3088 Option to set session cookie as secure and httpOnly
+        Set secure="true" only if you are using https
+    -->
+   <SessionCookie secure="false" httpOnly="true" />
    
    <!-- 
    		LAMS Valve
Index: lams_build/conf/windows/jboss/jbossweb/context.xml
===================================================================
diff -u -r251040fd2be7db0182cdc438713a3ba1fc110611 -rb1003ae8d1779b2cc8ff4347e0943da4e1755a6f
--- lams_build/conf/windows/jboss/jbossweb/context.xml	(.../context.xml)	(revision 251040fd2be7db0182cdc438713a3ba1fc110611)
+++ lams_build/conf/windows/jboss/jbossweb/context.xml	(.../context.xml)	(revision b1003ae8d1779b2cc8ff4347e0943da4e1755a6f)
@@ -13,6 +13,11 @@
    role for servlet init/destroy events.
    -->
    <InstanceListener>org.jboss.web.tomcat.security.RunAsListener</InstanceListener>
+
+   <!-- LDEV-3088 Option to set session cookie as secure and httpOnly
+	Set secure="true" only if you are using https
+    -->
+   <SessionCookie secure="false" httpOnly="true" />
    
    <!-- 
    		LAMS Valve