Forum Discussion
AshuA_246482
Nimbostratus
Nimbostratuscookie & requestVerificationToken is set without the HttpOnly Cookie parameter
Pen test finding below:
How to set cookie & requestVerificationToken with the HttpOnly Cookie parameter on LTM running on 11.6
Risk : When a cross-site scripting vulnerability is present, an at...
Chris_Grant
Employee
EmployeeIf you're not running ASM, you may need to look to your application, but if you're running ASM, we can help pretty easily: https://support.f5.com/csp/article/K11930
