View Complete Thread
  • Re: Setting HTTPONLY for CLASSIC ASP Session Cookie - URGENT HELP NEEDED PLEASE!!!

    Nov 06, 2012 05:55 PM|networkengineer49|LINK

     http://weblogs.asp.net/dotnetstories/archive/2009/10/24/five-common-mistakes-in-the-web-config-file.aspx

     I'm having this issue - reluctant to use url rewrite as webserver hosts many websites.

    This should mark all server session cookies to HTTPOnly?  

     

    Set this to True - Not working in my case -  server not setting  session cookies to HTTPOnly