From 22518711a8143d7fcfdcf3304f62ea35e676b37b Mon Sep 17 00:00:00 2001
From: Terii Wang <twang3@atlassian.com>
Date: Tue, 18 Oct 2022 14:12:21 -0500
Subject: [PATCH] ITPLT-2172 Adding "useHttpOnly" (security header flag) flag
 to Crowd server.xml template.

---
 roles/crowd_config/templates/server.xml.j2 | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/roles/crowd_config/templates/server.xml.j2 b/roles/crowd_config/templates/server.xml.j2
index 6f9751b..edda0da 100644
--- a/roles/crowd_config/templates/server.xml.j2
+++ b/roles/crowd_config/templates/server.xml.j2
@@ -34,7 +34,8 @@
                   unpackWARs="true">
               <Context path="{{ atl_tomcat_contextpath }}" 
                        docBase="../../crowd-webapp" 
-                       debug="0">
+                       debug="0"
+                       useHttpOnly="true">
                        <Manager pathname="">
                        </Manager>
               </Context>