Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Programming > ASP .Net > ASP General > Set HTTPOnly for Classic ASPSessionIDxxx cookie

Reply
Thread Tools

Set HTTPOnly for Classic ASPSessionIDxxx cookie

 
 
Andrew
Guest
Posts: n/a
 
      01-28-2010
Hi,

A security audit company has advised that we should set the HTTPOnly
attribute of the autogenerated ASPSessionID cookie in classic ASP.

Although I can set this for cookies I create I can find no way to set this
for the autogenerated cookie.

Could anyone please advise if this is possible and point me in the direction
of a fix?

BR

Andrew
 
Reply With Quote
 
 
 
 
Bob Barrows
Guest
Posts: n/a
 
      01-28-2010
The answers you received when you posted this question 10 days ago will not
have changed in that time.

Andrew wrote:
> Hi,
>
> A security audit company has advised that we should set the HTTPOnly
> attribute of the autogenerated ASPSessionID cookie in classic ASP.
>
> Although I can set this for cookies I create I can find no way to set
> this for the autogenerated cookie.
>
> Could anyone please advise if this is possible and point me in the
> direction of a fix?
>
> BR
>
> Andrew


--
Microsoft MVP - ASP/ASP.NET - 2004-2007
Please reply to the newsgroup. This email account is my spam trap so I
don't check it very often. If you must reply off-line, then remove the
"NO SPAM"


 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Classic ASP ASPSessionID cookie HTTPOnly Andrew ASP General 4 02-15-2010 12:01 PM
How to set a cookie using Cookie Module tryg.olson@gmail.com Python 2 01-08-2009 02:39 PM
Cookie Confusion - How to Set a Cookie cbhoem@gmail.com Python 5 05-02-2008 02:56 PM
Applet and HttpOnly cookies in IE 6.0 SP1 Adarsh Bhat Java 2 07-14-2006 04:57 AM
Cookies set one time, I delete cookie, cookie is never set again! Phil Powell Javascript 2 09-05-2003 02:17 PM



Advertisments