Forum Discussion
Doran_Lum
Nimbostratus
NimbostratusSecure flag for cookie
Hi all we have a settings for secure flag for cookies as below but somehow in the screenshot it doesn't really show that the cookie are secure. Am I missing something on the settings ? Our security s...
Samir
MVP
MVPPer Screen shot, its seems you are encrypting cookie not adding secure flag.
when HTTP_RESPONSE {
set COOKIE_VAL [HTTP::header values "Set-Cookie"]
HTTP::header remove "Set-Cookie"
foreach COOKIE_NAME $COOKIE_VAL {
HTTP::header insert "Set-Cookie" "${COOKIE_NAME}; Secure; HttpOnly"
}
}
Doran_LumNimbostratus
NimbostratusThank you this worked. With this, do I still need to enable the Session Cookie as above ?
