Forum Discussion
Bob_10976
Sep 09, 2014Nimbostratus
Aduit Log full of Operation not supported Errors
We created an irule to address a security audit that dinged us on "Sensitive Cookie Missing 'HTTPONLY' Attribute". Since then our audit log is full of errors from this irule. Though the irule appea...
What_Lies_Bene1
Sep 10, 2014Cirrostratus
This will do it I think, sorry no way to test right now;
when HTTP_RESPONSE {
set ck [HTTP::header values "Set-Cookie"]
if { $ck ne "" } {
HTTP::header remove "Set-Cookie"
foreach acookie $ck {
if { [string tolower $acookie] contains "httponly" } {
HTTP::header insert "Set-Cookie" "${acookie}"
}
else {
HTTP::header insert "Set-Cookie" "${acookie}; HttpOnly"
}
}
}
else { return }
}
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects