You can create your own Filter instance that is called before WicketFilter and pass the ServletResponse instance into a chain that prevents the creation of cookies:
chain.doFilter(req, new HttpServletResponseWrapper(response) { @Override public void addCookie(Cookie cookie) { } });
source share