This should be a good starting point

Cookie Interface and Impl


Setting a response cookie

This was just a quick glance. I'm not sure exactly where the header is set but this should be a good start.


On Thu, Mar 2, 2017 at 2:15 PM, Sven Kubiak <> wrote:

I have looked at the current Cookie Implementation in Undetow, and it seems like there is no support for the Same-Site Cookie Attribute.




I’ll be happy to create a pull request, if someone could point me to the right classes (and test cases) where the response headers for the cookies are being set.


Best regards,


undertow-dev mailing list