Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

BOUABRE_343008's avatar
BOUABRE_343008
Icon for Nimbostratus rankNimbostratus
Dec 05, 2017

HTTPOnly "attribute and secure "attribute

Hello everyone   The report of my scan shows us the following errors: - "The cookie does not contain the" HTTPOnly "attribute." - "The cookie does not contain the" secure "attribute." I added the ...
application delivery
ASM Advanced WAF
big-ip
security
Lee_Sutcliffe's avatar
Lee_Sutcliffe
Icon for Nacreous rankNacreous
Dec 05, 2017

Hi, looks to be a typo, try this:

HTTP_RESPONSE { 
    foreach mycookie [HTTP::cookie names] { 
        HTTP::cookie secure $mycookie enable 
        HTTP::cookie httponly $mycookie enable 
        } 
}