Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Vitaliy_Savrans's avatar
Vitaliy_Savrans
Icon for Nacreous rankNacreous
Nov 19, 2014

Hi,

if you use ASM security policy you can add http_only attribute by:

Security  ››  Application Security : Headers : Cookies List  ››  Edit Cookie

and set 

Insert HttpOnly attribute
. But be aware that the Application Security will not check the enforcement of this attribute