Forum Discussion
Chad_Roberts_21
Nimbostratus
NimbostratusSecuring Cookies
I use a simple rule to add ";Secure" to the end of ever "Set-Cookie" header in a particular app server's response, and it works great for what it was originally intended to do. when HTTP_RESPONSE...
Christopher_FunNimbostratus
NimbostratusThanks for posting your example, it has been quite helpful.
But I have been playing with this script for an hour or so now and noticed that it only sets the last Set-Cookie in the respose to Secure, Httponly. Any ideas why this may be the case?
Could it be the way our specific IIS server returns the respose?
