Forum Discussion
Blue_whale
Cirrocumulus
May 30, 2019Irule - How this Secure Cookie Irule works ?
Can some one explain how this SECURE_COOKIE Irule works . ltm rule SECURE_COOKIE { when HTTP_RESPONSE_RELEASE { set unsafe_cookie_headers [HTTP::header values "Set-Cookie"] HTTP::header...
Dario_Garrido
Noctilucent
May 30, 2019The iRule adds the tag "Secure" to all "Set-Cookie" headers. This is done to avoid clients to use those cookie in case of being in a unsafe communication.
REF - https://en.wikipedia.org/wiki/Secure_cookie
KR,
Dario.
- Dario_GarridoMay 30, 2019
Noctilucent
when HTTP_RESPONSE_RELEASE { # Get all values of Set-Cookie headers set unsafe_cookie_headers [HTTP::header values "Set-Cookie"] # Remove the current unsafe Set-Cookie header HTTP::header remove "Set-Cookie" foreach set_cookie_header $unsafe_cookie_headers { # Insert a new Set-Cookie header with '<value>; Secure' for each one (to securize) HTTP::header insert "Set-Cookie" "${set_cookie_header}; Secure" } }- Blue_whaleMay 31, 2019
Cirrocumulus
Dario thank you ,
what do you mean by unsafe communication ?
- Dario_GarridoMay 31, 2019
Noctilucent
The client is not going to use the cookie tagged as "Secure" if the communication is through HTTP (unsecure).
REF - https://en.wikipedia.org/wiki/Secure_cookie
I would appreciate if you rate my answer.
KR,
Dario.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
