After Any tools upgrade don't forget to secure JSESSIONID cookie [WebLogic]

JSESSIONID cookie should be important area of concern for every tools upgrade/installation on weblogic installation.

Follow Doc ID 2008003.1.

Enter following text in weblogic.xml before </weblogic-web-app>

<session-descriptor>
    <cookie-secure>true</cookie-secure>
    <url-rewriting-enabled>false</url-rewriting-enabled>
  </session-descriptor>


There are two weblogic.xml locate in 
1. /jde_home/…./SCFHA/targets/../owl_deployments/webclient.ear/app/webclient.war/WEB-INF  
2. /MW_HOME/user_projects/domains/…./servers/<E1_server>/stage/<instance>/app/webclient.war/WEB-INF

HTTPS must be enabled in order to work this.