View Complete Thread
  • Re: Setting HTTPONLY for CLASSIC ASP Session Cookie - URGENT HELP NEEDED PLEASE!!!

    Dec 02, 2012 07:24 PM|mrburger|LINK

    Actually in this case it is.

    Just create a web.config in the root directory for your classic asp app with the rewrite xml in place and IIS 7/7.5 will pick up on it and apply the HttpOnly property to all your cookies