Forum Discussion

Sumit_sam_14525's avatar
Sumit_sam_14525
Icon for Nimbostratus rankNimbostratus
May 30, 2014

How to set HTTPOnly in cookie when HTTP::response & make the session persist on that cookie

I need to insert secure cookie in HTTP:response and then make session persist on that cookie.   Any Ideas !!  
Cory_50405's avatar
Cory_50405
Icon for Noctilucent rankNoctilucent
May 30, 2014

Within the thread I linked, Aaron posted this iRule:

when HTTP_RESPONSE { 
     Check if the response contains the persistence cookie 
    if {[HTTP::cookie BIGipServerMy_Http_Pool] ne ""}{ 
         Set the httponly flag on the persistence cookie if it is in the response
        HTTP::cookie httponly BIGipServerMy_Http_Pool enable
    }
}

Some more details on HTTP cookie information and manipulation:

https://devcentral.f5.com/wiki/iRules.http__cookie.ashx