For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Vitaliy_Savrans's avatar
Vitaliy_Savrans
Icon for Nacreous rankNacreous
Nov 20, 2014

Hi,

if you use ASM security policy you can add http_only attribute by:

Security  ››  Application Security : Headers : Cookies List  ››  Edit Cookie

and set 

Insert HttpOnly attribute
. But be aware that the Application Security will not check the enforcement of this attribute