Friends, I am facing one vulnerability issue saying sitename#lang cookie not being HttpOnly for my application. Can anyone suggest me that how and where can we change it. or any implications if I change it.


enter image description here

  • In your Global.asax, in one of the event handlers you can try var httpCookie = Response.Cookies["your cookie name"]; if (httpCookie != null) httpCookie.Secure = false; Commented Dec 19, 2019 at 14:14


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.