Friends, I am facing one vulnerability issue saying sitename#lang cookie not being HttpOnly for my application. Can anyone suggest me that how and where can we change it. or any implications if I change it.


enter image description here

  • In your Global.asax, in one of the event handlers you can try var httpCookie = Response.Cookies["your cookie name"]; if (httpCookie != null) httpCookie.Secure = false; Dec 19, 2019 at 14:14


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Browse other questions tagged or ask your own question.