import java.io.IOException;

import javax.servlet.ServletException;
import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

public class Cookies extends HttpServlet {

  @Override
  protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
    test1(resp);
    test2(resp);
    test3(resp);
    test4(resp);
    test5(resp);
    test6(resp);
    test7(resp);
  }

  private void test1(HttpServletResponse resp) {
    Cookie cookie = new Cookie("cake", "special value here");
    cookie.setSecure(true);
    resp.addCookie(cookie);
  }

  private void test2(HttpServletResponse resp) {
    Cookie cookie = new Cookie("cake", "special value here");
    cookie.setSecure(false);
    System.out.println("danger here!");
    resp.addCookie(cookie);  // "Insecure Cookie (Java)" warning issued here
  }

  private void test3(HttpServletResponse resp) {
    Cookie cookie = getSecureCookie();
    resp.addCookie(cookie);           // ok: getSecureCookie() returns a cookie whose secure flag is set    
  }

  private void test4(HttpServletResponse resp) {
    Cookie cookie = getInsecureCookie();
    resp.addCookie(cookie);  // "Insecure Cookie (Java)" warning issued here
  }

  private Cookie getSecureCookie() {
    Cookie cookie = new Cookie("cake", "special value here");
    cookie.setSecure(true);
    return cookie;
  }

  private Cookie getInsecureCookie() {
    Cookie cookie = new Cookie("cake", "special value here");
    cookie.setSecure(System.currentTimeMillis() % 2 == 0);
    return cookie;
  }

  private void test5(HttpServletResponse resp) {
    Cookie cookie = new Cookie("cake", "special value here");
    resp.addCookie(cookie);  // "Insecure Cookie (Java)" warning issued here
  }

  private void test6(HttpServletResponse resp) {
    Cookie cookie = getInsecureCookie();
    Cookie copy = cookie;
    copy.setSecure(true);
    resp.addCookie(cookie);           // ok: secure flag set (via copy)
  }

  private void test7(HttpServletResponse resp) {
    Cookie cookie = getInsecureCookie();
    cookie.setSecure(true);
    Cookie copy = cookie;
    copy.setSecure(false);
    resp.addCookie(cookie);  // "Insecure Cookie (Java)" warning issued here
  }
}