CODEWITHSUNDEEP
securitysession-cookiesowasphdiv
avijendr
avijendr

Reputation: 4153

HttpOnly for request cookies

Is there a way of setting a request cookie httpOnly? If not why can't we set it? I've set the response cookies to httpOnly using weblogx.xml/weblogic server.

Upvotes: 5

Views: 4747

Answers (1)

SilverlightFox
SilverlightFox

Reputation: 33538

Not possible.

Cookies are set in a HTTP response, and are read from a HTTP request. You can only set flags when cookies are created, so they can only be set in the response when using HTTP so it would not make sense to set HttpOnly on a request cookie.

Upvotes: 10

Related Questions