To secure CFGLOBALS cookie I tried the following method as I did for CFID and CFTOKEN . But its not working for CFGLOBALS . Note that this method is working fine for CFID and CFTOKEN.
<cfset cf_ssn_cookies = {httponly='true', secure='true'}>
<cfapplication name="ABCD" clientmanagement="Yes" sessionmanagement="Yes" setclientcookies="Yes"sessioncookie=#cf_ssn_cookies#>
Any idea why the HTTPOnly and SECURE flags are not setting up for CFGLOBALS cookie.
Please kindly mark the thread as correctly answered. If you are unsatisfied with the current answers, then please say so.
Alternatively, you may of course post a new message which you consider to be the correct or best explanation, and mark it as the correct answer. Rounding off a thread in this way will help others to quickly find solutions. Thanks.
This is appear to be a bug and it has been reported in Adobe. So I think we need to wait untill Adobe fix this bug.
Already have an account? Login
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
AdChoices