Forum Discussion

BOUABRE_343008's avatar
BOUABRE_343008
Icon for Nimbostratus rankNimbostratus
Dec 05, 2017

HTTPOnly "attribute and secure "attribute

Hello everyone   The report of my scan shows us the following errors: - "The cookie does not contain the" HTTPOnly "attribute." - "The cookie does not contain the" secure "attribute." I added the ...
application delivery
ASM Advanced WAF
BIG-IP
security
Lee_Sutcliffe's avatar
Lee_Sutcliffe
Icon for Nacreous rankNacreous
Dec 05, 2017

Hi, looks to be a typo, try this:

HTTP_RESPONSE { 
    foreach mycookie [HTTP::cookie names] { 
        HTTP::cookie secure $mycookie enable 
        HTTP::cookie httponly $mycookie enable 
        } 
}