Forum Discussion
MSK_222682
Nimbostratus
NimbostratusMultiple Secure and HttpOnly attributes seen for cookie
Hi,
I ran a curl command from a linux machine to a URL (on https) which is hosted on our BIG IP LTM. This virtual server has been set to add Secure, HttpOnly attributes to the cookie.
However, I s...
MSK_222682Nimbostratus
NimbostratusHi Kai,
Below is the configured iRule:
when HTTP_RESPONSE {
set unsafe_cookie_headers [HTTP::header values "Set-Cookie"]
HTTP::header remove "Set-Cookie"
foreach set_cookie_header $unsafe_cookie_headers {
HTTP::header insert "Set-Cookie" "${set_cookie_header}; Secure; HttpOnly"
}
}
