Forum Discussion
PowerShellDon_1
Nimbostratus
NimbostratusASM | Too many cookies in the request
Hi
I am getting some (what i believe to be) legit requests blocked by ASM. The violation is 'Modified domain cookie(s) , but when i click it to get more info on the violation i get;
Too many...
samstep
Cirrocumulus
CirrocumulusI believe that ASM will detect this as a violation because this condition (55 cookies with the same name/different values) actually breaks the RFC standard for cookies.
RFC6265 states:
"Servers SHOULD NOT include more than one Set-Cookie header field in the same response with the same cookie-name"
