Forum Discussion
matt_12671
Nimbostratus
NimbostratusHow to properly insert HttpOnly and Secure cookie directives?
My load balancer has an iRule that adds the HttpOnly and Secure cookie directives. The rules is adding the directives multiple times, and in the incorrect places. How can I get the directives added c...
matt_12671Nimbostratus
NimbostratusA co-worker and I figured out something that works for us:
set unsafe_cookie_headers [HTTP::header values "Set-Cookie"]
HTTP::header remove "Set-Cookie"
foreach set_cookie_header $unsafe_cookie_headers {
HTTP::header insert "Set-Cookie" "${set_cookie_header}; Secure; HttpOnly"
}
- matt_12671Evidently, I can't pick my own answer as the answer. If I could, I would pick this.
- Be careful about setting the secure attribute if the connection is not HTTPS: http://en.wikipedia.org/wiki/HTTP_cookieCookie_attributes
