2

Friends, I am facing one vulnerability issue saying sitename#lang cookie not being HttpOnly for my application. Can anyone suggest me that how and where can we change it. or any implications if I change it.

Thanks,

enter image description here

Improve this question
1
  • In your Global.asax, in one of the event handlers you can try var httpCookie = Response.Cookies["your cookie name"]; if (httpCookie != null) httpCookie.Secure = false;
    – Debabrata Biswas
    Dec 19, 2019 at 14:14

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Browse other questions tagged or ask your own question.