Configuring a restrictive cookie path

In your web application server, you can restrict cookie access to a specific application for enhanced security. If not restricted, cookies are valid across all the deployed applications.

Procedure

  1. If you are using WebLogic, perform the following steps.
    1. Extract the weblogic.xml file from the WAR or EAR package where you want to add the restrictive cookie path.
    2. Add the following to the weblogic.xml file, where context-path is the context path for the deployed application. For Unica applications the context path is typically /unica. 
      
<session-descriptor> 
    <session-param> 
      <param-name>CookiePath</param-name> 
      <param-value>/context-path> </param-value> 
    </session-param> 
</session-descriptor>
    3. Rebuild the WAR or EAR file.
  2. If you are using WebSphere®, perform the following steps.
    1. In the WebSphere® administration console, navigate to the Session Manager > Cookie tab.
    2. Set the Cookie Path to the context path of your application.

      For Unica applications the context path is typically /unica.