Forum Discussion
dw_888_212625
Nimbostratus
NimbostratusHow to set httponly without secure flag
Please advise How to set httponly without secure flag? is the below ok?
when HTTP_RESPONSE { set var [HTTP::header values "Set-Cookie"] HTTP::header remove "Set-Cookie" foreach tcookie $var { HTTP::header insert "Set-Cookie" "${tcookie}; HttpOnly; " } }
1 Reply
Hannes_RappUse
function. Ref: https://devcentral.f5.com/wiki/iRules.HTTP__cookie.ashxHTTP::cookie httponly CookieName enablewhen HTTP_RESPONSE { Iterate through all server-inserted cookies. Enable the httponly option foreach cookieName [HTTP::cookie names] { HTTP::cookie httponly $cookieName enable } }
