Options

Cookie Security (HTTPOnly-/Secure-Flag)

saslsasl Member ✭
in ADC - Application Delivery
Hi,

It would be nice if it is possible to set this for the cookies (Cookie Persistence).
Will this feature be available in one of the next releases?

RFC 6265 (Chapter: 4.1.2.6. The HttpOnly Attribute)

Regards

Comments

  • Options
    mischamischa Member ✭
    edited February 2014
    You can do this today with aFleX.

    when HTTP_RESPONSE { if { [HTTP::header exists "Set-Cookie"] } { set cookie_value [HTTP::cookie "TestCookie"] HTTP::cookie remove "TestCookie" HTTP::header insert "Set-Cookie" "TestCookie=$cookie_value; HttpOnly" } }
  • Options
    saslsasl Member ✭
    edited February 2014
    thx mischa for this hint, very usefull for me!
Sign In or Register to comment.