/**
* Override and return true if you want secure-only session and instance cookies. This prevents
* cookie hijacking man-in-the-middle attacks. Note that to make this effective (and for sessions to
* work at all), your site must be behind HTTPS at all times. In development mode, you can disable
* secure mode (@see er.extensions.ERXRequest.isSecureDisabled) for running in direct-connect
* with this mode enabled.
*
* @return whether or not secure cookies are enabled
*/
public boolean useSecureSessionCookies() {
return false;
}
Returning true for this method will cause Wonder to convert your session and instance cookies to be secure-only cookies before they go out over the wire.
ms