Cookie Security (HTTPOnly-/Secure-Flag)

You can do this today with aFleX.

when HTTP_RESPONSE { if { [HTTP::header exists "Set-Cookie"] } { set cookie_value [HTTP::cookie "TestCookie"] HTTP::cookie remove "TestCookie" HTTP::header insert "Set-Cookie" "TestCookie=$cookie_value; HttpOnly" } }