Forum Discussion
HTTPOnly "attribute and secure "attribute
Hello everyone
The report of my scan shows us the following errors: - "The cookie does not contain the" HTTPOnly "attribute." - "The cookie does not contain the" secure "attribute." I added the following irula that works very well: when HTTP_RESPONSE { foreach mycookie [HTTP :: cookie names] { HTTP :: cookie secure $ mycookie enable } }
But when I try to write the script secure cookie + httponly: when HTTP_RESPONSE { foreach mycookie [HTTP :: cookie names] { HTTP :: cookie secure $ mycookie enable HTTP :: httponly cookie $ mycookie enable } }
I have an error, can you help me?
2 Replies
- Lee_Sutcliffe
Nacreous
Hi, looks to be a typo, try this:
HTTP_RESPONSE { foreach mycookie [HTTP::cookie names] { HTTP::cookie secure $mycookie enable HTTP::cookie httponly $mycookie enable } } - Srini_87152
Cirrostratus
if you running 12.x version,default you have option enable these on cookie level.
Thx Srini
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com