Forum Discussion
kimhenriksen
Cirrocumulus
CirrocumulusIdentify a cookie based on domain and then remove it from the request?
Is there a way to identify a specific cookie based on the domain setting is has and then have it removed from the request?
The problem is that the client has 2 cookies named MHRSession, one with...
kimhenriksenCirrocumulus
CirrocumulusWe have tested something like this:
when CLIENT_ACCEPTED {
ACCESS::restrict_irule_events disable
log local0. "[IP::remote_addr] Removed domain.com cookie"
}
when HTTP_RESPONSE {
if {[HTTP::cookie exists "MRHSession"] {
if {HTTP::cookie domain "MRHSession" contains "domain.com"}{
HTTP::cookie remove "MRHSession"
}
}
}
The problem is that it seems to remove the cookie named MRHSession that contains site1.domain.com as well... or at least breaks the authentication in some way.
