import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServletResponse;
?
/**
?* Cookie Tools
?*/
public class CookieUtil {
?
? ? /**
? ? ? ? ? ?* Set httponly cookie
? ? ?* @param ?Response HTTP response
? ? ?* @param ?Cookie cookie object
? ? ?* @param ?Ishttponly is httponly
? ? ?*/
? ? public static void addCookie(HttpServletResponse response, Cookie cookie, boolean isHttpOnly) {
? ? ? ? String name = cookie.getName();//Cookie name
? ? ? ? String value = cookie.getValue();//Cookie value
? ? ? ? int maxAge = cookie.getMaxAge();//Maximum survival time (milliseconds, 0 representative deletion, -1 represents the same as the browser session)
? ? ? ? String path = cookie.getPath();//path
? ? ? ? String domain = cookie.getDomain();//area
? ? ? ? boolean isSecure = cookie.getSecure();//Is there a security protocol??
?
? ? ? ? StringBuilder buffer = new StringBuilder();
?
? ? ? ? buffer.append(name).append("=").append(value).append(";");
?
? ? ? ? if (maxAge == 0) {
? ? ? ? ? ? buffer.append("Expires=Thu Jan 01 08:00:00 CST 1970;");
? ? ? ? } else if (maxAge > 0) {
? ? ? ? ? ? buffer.append("Max-Age=").append(maxAge).append(";");
? ? ? ? }
?
? ? ? ? if (domain != null) {
? ? ? ? ? ? buffer.append("domain=").append(domain).append(";");
? ? ? ? }
?
? ? ? ? if (path != null) {
? ? ? ? ? ? buffer.append("path=").append(path).append(";");
? ? ? ? }
?
? ? ? ? if (isSecure) {
? ? ? ? ? ? buffer.append("secure;");
? ? ? ? }
?
? ? ? ? if (isHttpOnly) {
? ? ? ? ? ? buffer.append("HTTPOnly;");
? ? ? ? }
?
? ? ? ? response.addHeader("Set-Cookie", buffer.toString());
? ? }
?
}

值得一提的是，Java Ee 6.0中的cookie已經(jīng)設(shè)置了httponly，所以如果兼容Java EE 6.0兼容的容器（例如Tomcat 7），可以使用cookie.sethttponly設(shè)置HTTPONLY：

cookie.setHttpOnly(true);

Java HttpCookie 類的setHttpOnly(Boolean httpOnly) 方法用于指示cookie 是否可以被認(rèn)為是HTTPOnly。如果設(shè)置為 true，則 cookie 不能被 JavaScript 等腳本引擎訪問。

句法

public void setHttpOnly(boolean httpOnly)

范圍

上述方法只需要一個參數(shù)：

httpOnly - 如果 cookie 僅是 HTTP，則表示 true，這意味著它作為 HTTP 請求的一部分可見。

返回

不適用

示例 1

import java.net.HttpCookie;  
public class JavaHttpCookieSetHttpOnlyExample1 {  
  public static void main(String[] args) {  
    HttpCookie  cookie = new HttpCookie("Student", "1");  
    // Indicate whether the cookie can be considered as HTTP Only or not.  
        cookie.setHttpOnly(true);  
    // Return true if the cookie is considered as HTTPOnly.  
System.out.println("Check whether the cookie is HTTPOnly: "+cookie.isHttpOnly());  
     }  
 }

輸出：

Check whether the cookie is HTTPOnly: true

示例 2

import java.net.HttpCookie;  
public class JavaHttpCookieSetHttpOnlyExample2 {  
    public static void main(String[] args) {  
        HttpCookie  cookie = new HttpCookie("Student", "1");  
        // Indicate whether the cookie can be considered as HTTP Only or not.  
            cookie.setHttpOnly(false);  
        // Return false if the cookie is not considered as HTTPOnly.  
    System.out.println("Check whether the cookie is HTTPOnly: "+cookie.isHttpOnly());  
   }  
}

輸出：

Check whether the cookie is HTTPOnly: false

示例 3

import java.net.HttpCookie;  
public class JavaHttpCookieSetHttpOnlyExample3 {  
    public static void main(String[] args) {  
        HttpCookie cookie1 = new HttpCookie("Student1", "1");  
        HttpCookie cookie2 = new HttpCookie("Student2", "2");  
        //Indicate whether the cookie can be considered as HTTP Only or not.  
        cookie1.setHttpOnly(true);  
        cookie2.setHttpOnly(false);  
        System.out.println("Check whether the first cookie is HTTPOnly:"+cookie1.isHttpOnly());  
        System.out.println("Check whether the second cookie is HTTPOnly:"+cookie2.isHttpOnly());  
       }  
    }

輸出：

Check whether the first cookie is HTTPOnly:true
Check whether the second cookie is HTTPOnly:false

到此這篇關(guān)于Java設(shè)置httponly cookie的實(shí)現(xiàn)示例的文章就介紹到這了,更多相關(guān)Java設(shè)置httponly cookie內(nèi)容請搜索腳本之家以前的文章或繼續(xù)瀏覽下面的相關(guān)文章希望大家以后多多支持腳本之家！

您可能感興趣的文章: